Is Endpoint Detection and Response is affected with CVE-2023-42282?

Products

• Endpoint Detection and Response

Issue/Introduction

There is a vulnerability found in different version of Endpoint Detection & Response (EDR) mentioned in CVE-2023-42282

https://nvd.nist.gov/vuln/detail/CVE-2023-42282

Environment

EDR: 4.6 - 4.8.

Resolution

It will be fix in EDR 4.10 version.

Additional Information

A patch has been published for 4.9.x version.

Please follow the below steps.

1. Upgrade the EDR to 4.9.x and once its done

2. Login to EDR and confirm the EDR version.

3. Open EDR cli and run the command # update download .

4. Update install.

Once the EDR is up and running.

1. Open the EDR cli

2. run # show -v

3. Run # patch list you should see the atp-patch1-4.9.1-1

4. Run # patch install atp-patch1-4.9.1-1

5. To check what patches are installed run # patch list_installed.