CVE-2022-28880 | Severity.io

Description

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Related CPE's

f-secure

elements_endpoint_detection_and_response

Vulnerable

f-secure

elements_endpoint_protection

Vulnerable

Vulnerable

cloud_protection_for_salesforce

Vulnerable

f-secure

elements_collaboration_protection

Vulnerable

Vulnerable

Vulnerable

Vulnerable

References

https://www.f-secure.com/en/home/support/vulnerability-reward-program/hall-of-fame

Not ApplicableVendor Advisory

https://www.withsecure.com/en/expertise/people

Not ApplicableVendor Advisory

https://www.f-secure.com/en/home/support/vulnerability-reward-program/hall-of-fame

Not ApplicableVendor Advisory

https://www.withsecure.com/en/expertise/people

Not ApplicableVendor Advisory

Weaknesses

[email protected]

Primary

NVD-CWE-noinfo

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-400

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

4.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-08-05T17:15:08.447Z

4 years ago

Last modified

2026-06-17T04:39:16.317Z

3 months ago