« Volver al listado

CVE-2022-28878

Estado: ModificadaAlta (7.5)—

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

F-secure — AtlantF-secure — Cloud Protection FOR SalesforceF-secure — Elements Collaboration ProtectionF-secure — Elements Endpoint ProtectionF-secure — Internet GatekeeperF-secure — Linux SecurityF-secure — Linux Security 64

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-28878",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve-notifications-us@f-secure.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 0.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve-notifications-us@f-secure.com",
      "affectedData": [
        {
          "vendor": "F-Secure",
          "product": "All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security 64 F-Secure Linux Security 32 F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection",
          "versions": [
            {
              "status": "affected",
              "version": "All Version"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-07-22T16:15:08.193",
  "references": [
    {
      "url": "https://www.f-secure.com/en/business/support-and-downloads/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve-notifications-us@f-secure.com"
    },
    {
      "url": "https://www.withsecure.com/en/support/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve-notifications-us@f-secure.com"
    },
    {
      "url": "https://www.f-secure.com/en/business/support-and-downloads/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.withsecure.com/en/support/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine."
    },
    {
      "lang": "es",
      "value": "Se ha detectado una vulnerabilidad de denegación de servicio en F-Secure Atlant y en determinados productos WithSecure al escanear el archivo APK fuzzed es posible que pueda bloquear el motor de escaneo"
    }
  ],
  "lastModified": "2026-06-17T04:39:16.087",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f-secure:elements_endpoint_protection:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7098F9BA-B2C0-4310-96D5-D0134761F7A6"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f-secure:atlant:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A8AF772-E3DC-4C9B-B3E8-81103D3B7BC4"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:cloud_protection_for_salesforce:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F04F9410-836A-428B-9959-4662E79D963D"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:elements_collaboration_protection:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D28AA80A-1FF6-4DD6-BCCB-C455C2BB5032"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:-:*:*:*:*:-:*:*",
              "vulnerable": true,
              "matchCriteriaId": "716021F0-35B9-4567-838A-DAEC65A6601F"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:linux_security:-:*:*:*:*:*:x86:*",
              "vulnerable": true,
              "matchCriteriaId": "26113C91-7FD5-4C3B-84F7-6A986CA26461"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:linux_security_64:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5E48AF8-57C4-4DFB-9E64-E3B3352941E9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve-notifications-us@f-secure.com"
}