CVE-2022-36853: 
NixOS vulnerability analysis and mitigation

CVE-2022-36853 is a local privilege escalation vulnerability affecting KeySight N6841A RF Sensor. The vulnerability was discovered on November 3, 2022, and publicly disclosed on July 19, 2023. The vulnerability exists within the smsRestoreDatabaseZip function, which contains an exposed dangerous function that could allow attackers to escalate privileges and execute arbitrary code in the context of SYSTEM (ZDI Advisory).

The vulnerability has been assigned a CVSS v3.0 base score of 7.8 (High) with the following vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The specific flaw exists within the smsRestoreDatabaseZip function, where an exposed dangerous function allows attackers with low-privileged code execution capabilities to escalate privileges (ZDI Advisory).

If successfully exploited, this vulnerability allows an attacker to escalate privileges and execute arbitrary code in the context of SYSTEM. The attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability (ZDI Advisory).

KeySight has issued an update to correct this vulnerability. Users are advised to apply the security update. More details about the fix can be found in CISA's advisory (ZDI Advisory).