CVE-2022-31199Netwrix Auditor Insecure Object Deserialization Vulnerability

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.

9.8 CRITICALEPSS 36.00%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-06-17 04:45 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
9.8	CRITICAL	3.1NVD	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA required action

⚡ Known exploited · remediation due Aug 1, 2023

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Details

CVE ID: CVE-2022-31199
Status: Analyzed
Assigner (CNA): mitre
Published: Nov 8, 2022
Last modified: 2026-06-17 04:45 UTC
Weaknesses: CWE-502
CWE-122

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:43 UTC.