Symantec Endpoint Protection for CVE-2022-26923

Products

• Endpoint Security

Issue/Introduction

Does the Symantec Endpoint Protection client protect against CVE-2022-26923?

Environment

Release : 14.x

Resolution

The Symantec Security Response team looked into this. They were unable to reproduce the vulnerability to MS Active Directory using the reported data. This was back in May of 2022. They've looked for additional samples and data to reproduce the issue, but have not found any. Because of this, there is nothing to mitigate until we are able to locate the necessary data to reproduce the vulnerability.

There have been no reports of exploits in the wild that we are aware of. If such data becomes available, we will research to see if we cover the vulnerability, or create a signature to do so.