---
id: 4005
title: "[CVE-2022-31199] Netwrix Auditor Advisory"
cve: CVE-2022-31199
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/netwrix-auditor-advisory"
published_at: "2022-07-13T00:00:00Z"
tags: ["rce", "active-directory", "deserialization", "vulnerability-advisory", "netwrix", "cve-2022-31199"]
phying_url: "https://phying.com/item/4005"
lang: en
---

# [CVE-2022-31199] Netwrix Auditor Advisory

## Summary

Bishop Fox details CVE-2022-31199, an insecure object deserialization flaw in Netwrix Auditor's .NET remoting service (TCP 9004) enabling RCE and AD compromise; fixed in 10.5.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2022-31199
- **Published:** 2022-07-13T00:00:00Z
- **Original:** https://bishopfox.com/blog/netwrix-auditor-advisory
- **Phying News:** https://phying.com/item/4005