Lucene search
HistoryAug 05, 2022 - 5:15 p.m.
CVE-2022-28880
denial-of-service
f-secure
pe32-bit
remote exploit
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.7%
A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker.
Affected configurations
Node
f-secureelements_endpoint_detection_and_response
ORf-secureelements_endpoint_protection
applemacosMatch-
ORmicrosoftwindowsMatch-
Node
f-secureatlant
ORf-securecloud_protection_for_salesforce
ORf-secureelements_collaboration_protection
ORf-secureinternet_gatekeeper
ORf-securelinux_securityx86
ORf-securelinux_security_64
| Vendor | Product | Version | CPE |
|---|---|---|---|
| f-secure | elements_endpoint_detection_and_response | * | cpe:2.3:a:f-secure:elements_endpoint_detection_and_response:*:*:*:*:*:*:*:* |
| f-secure | elements_endpoint_protection | * | cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:* |
| apple | macos | - | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
| microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
| f-secure | atlant | * | cpe:2.3:a:f-secure:atlant:*:*:*:*:*:*:*:* |
| f-secure | cloud_protection_for_salesforce | * | cpe:2.3:a:f-secure:cloud_protection_for_salesforce:*:*:*:*:*:*:*:* |
| f-secure | elements_collaboration_protection | * | cpe:2.3:a:f-secure:elements_collaboration_protection:*:*:*:*:*:*:*:* |
| f-secure | internet_gatekeeper | * | cpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:* |
| f-secure | linux_security | * | cpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:x86:* |
| f-secure | linux_security_64 | * | cpe:2.3:a:f-secure:linux_security_64:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-28880 Denial-of-Service (DoS) Vulnerability
2022-08-05 16:46:48
prion
prion
Denial of service
2022-08-05 17:15:00
cve
cve
CVE-2022-28880
2022-08-05 17:15:08
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.7%
Related for NVD:CVE-2022-28880