Lucene search

[email protected]CVE-2022-28887

HistoryOct 12, 2022 - 6:15 p.m.

CVE-2022-28887

2022-10-1218:15:09

[email protected]

web.nvd.nist.gov

cve-2022-28887

dos

vulnerability

f-secure

withsecure

aerdl.dll

scanning engine

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash.

Affected configurations

NVD

Node

f-secureelements_endpoint_detection_and_responseMatch-

f-secureelements_endpoint_protectionMatch-

AND

applemacosMatch-

microsoftwindowsMatch-

Node

f-secureatlantMatch-

f-secureinternet_gatekeeperMatch--

f-securelinux_securityMatch-x86

f-securelinux_security_64Match-

CPENameOperatorVersion
f-secure:elements_endpoint_detection_and_responsef-secure elements endpoint detection and responseeq-
f-secure:elements_endpoint_protectionf-secure elements endpoint protectioneq-

CPE	Name	Operator	Version
f-secure:elements_endpoint_detection_and_response	f-secure elements endpoint detection and response	eq	-
f-secure:elements_endpoint_protection	f-secure elements endpoint protection	eq	-

CNA Affected

[
  {
    "vendor": "F-Secure and WithSecure",
    "product": "All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper",
    "versions": [
      {
        "version": "All Version ",
        "status": "affected"
      }
    ]
  }
]

References

www.f-secure.com/en/business/support-and-downloads/security-advisories

www.withsecure.com/en/support/security-advisories

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON

Related for CVE-2022-28887

nvd1 cvelist1 prion1