Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-37706 — Local privilege escalation exploit for CVE-2022-37706 targeting Enlightenment's setuid enlightenment_sys binary on Linux, enabling unprivileged users to gain root access. | Kitploit
Tools/GitHubGitHub/massive43/cve-2022-37706
Privilege EscalationVulnerability AnalysisExploitationPenetration TestingLearning & EducationBinary Exploitation
GitHubmassive43/cve-2022-37706

CVE-2022-37706

Local privilege escalation exploit for CVE-2022-37706 targeting Enlightenment's setuid enlightenment_sys binary on Linux, enabling unprivileged users to gain root access.

View Repository
1 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-37706

Overview

CVE-2022-37706 is a Local Privilege Escalation (LPE) vulnerability found in the enlightenment_sys component of the Enlightenment desktop environment for Linux. This vulnerability allows a local low-privileged user to escalate privileges to root on vulnerable systems.

  • CVE ID: CVE-2022-37706
  • Severity: High
  • CVSS v3.1: 7.8
  • Attack Vector: Local
  • Affected Component: enlightenment_sys
  • CWE: CWE-269 (Improper Privilege Management)

Description

The vulnerability occurs because the enlightenment_sys binary runs with setuid root privileges and does not properly validate certain pathnames. The unsafe handling of paths starting with the pattern /dev/.. can allow a local user to bypass intended restrictions and gain higher privileges.

Affected Versions

All versions of Enlightenment before 0.25.4 are reported to be vulnerable to CVE-2022-37706.

Impact

Successful exploitation can result in:

  • Privilege escalation from a normal user to root.
  • Full compromise of the system.
  • Unauthorized access to sensitive files.
  • Modification of system configurations.
  • Execution of administrative operations without authorization.

Detection

Administrators can check:

  • Existence of the enlightenment_sys binary.
  • The version of Enlightenment in use.
  • Suspicious activity involving enlightenment_sys.
  • System logs indicating privilege escalation attempts.

Mitigation

Upgrade

Update Enlightenment to version 0.25.4 or later.

Temporary Workaround

If updates are not yet available:

  1. Restrict access for untrusted local users.
  2. Monitor setuid binary usage.
  3. Apply the principle of least privilege.
  4. Audit the system regularly.

References

  • SentinelOne Vulnerability Database
  • Enlightenment Security Patches
  • NVD (National Vulnerability Database)
  • CVE Details
  • Security Advisories related to CVE-2022-37706

Disclaimer

This document is provided for educational purposes, security research, and vulnerability management only. Use of this information for unauthorized access to systems owned by others may violate applicable laws.

License

MIT License

Author

MassiveHQ Research Team

Download Tool