Cyber Resilience

CVE-2022-28881

Medium

Published: 10 August 2022

Published
10 August 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
EPSS Score 0.0046 64.6th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-28881 is a medium-severity an unspecified weakness vulnerability in F-Secure Elements Endpoint Detection And Response. Its CVSS base score is 4.3 (Medium).

Operationally, ranked in the top 35.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

CWE(s)
NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

f-secure
elements endpoint detection and response
all versions
f-secure
elements endpoint protection
all versions
f-secure
atlant
all versions
f-secure
cloud protection for salesforce
all versions
f-secure
elements collaboration protection
all versions
f-secure
internet gatekeeper
all versions
f-secure
linux security
all versions
f-secure
linux security 64
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References