Zero day exploit | blue coat proxies (CVE-2022-22047)

Products

• ProxySG Software - SGOS

Issue/Introduction

There is a zero day exploit (CVE-2022-22047). Are your Blue Coat proxies vulnerable to this exploit and if so, is there are any patches, hotfixes or mitigation options?

Environment

ProxySG and Content Analysis (CAS)

Resolution

ProxySG and CAS run proprietary operating systems. The CVE in question (CVE-2022-22047) only affects Microsoft Windows operating systems. Remediation of this CVE would need to be conducted at the Windows level via vendor patches (exploitation is at the operating system level).

Additional Information

For more information, refer to:

• CVE-2022-22047 Detail
• Windows CSRSS Elevation of Privilege Vulnerability.