« Volver al listado

CVE-2022-28879

Estado: ModificadaAlta (7.5)—

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

F-secure — AtlantF-secure — Cloud Protection FOR SalesforceF-secure — Elements Collaboration ProtectionF-secure — Elements Endpoint ProtectionF-secure — Internet GatekeeperF-secure — Linux SecurityF-secure — Linux Security 64

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-28879",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve-notifications-us@f-secure.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 0.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve-notifications-us@f-secure.com",
      "affectedData": [
        {
          "vendor": "F-Secure",
          "product": "All F-Secure and WithSecure Endpoint Protection products for Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection",
          "versions": [
            {
              "status": "affected",
              "version": "All Version"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-07-22T16:15:08.247",
  "references": [
    {
      "url": "https://www.f-secure.com/en/business/support-and-downloads/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve-notifications-us@f-secure.com"
    },
    {
      "url": "https://www.withsecure.com/en/support/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve-notifications-us@f-secure.com"
    },
    {
      "url": "https://www.f-secure.com/en/business/support-and-downloads/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.withsecure.com/en/support/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine."
    },
    {
      "lang": "es",
      "value": "Se ha detectado una vulnerabilidad de Denegación de Servicio (DoS) en F-Secure Atlant y en determinados productos WithSecure por la que el escaneo del componente aepack.dll puede bloquear el motor de escaneo"
    }
  ],
  "lastModified": "2026-06-17T04:39:16.207",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f-secure:elements_endpoint_protection:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7098F9BA-B2C0-4310-96D5-D0134761F7A6"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f-secure:atlant:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A8AF772-E3DC-4C9B-B3E8-81103D3B7BC4"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:cloud_protection_for_salesforce:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F04F9410-836A-428B-9959-4662E79D963D"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:elements_collaboration_protection:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D28AA80A-1FF6-4DD6-BCCB-C455C2BB5032"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:-:*:*:*:*:-:*:*",
              "vulnerable": true,
              "matchCriteriaId": "716021F0-35B9-4567-838A-DAEC65A6601F"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:linux_security:-:*:*:*:*:*:x86:*",
              "vulnerable": true,
              "matchCriteriaId": "26113C91-7FD5-4C3B-84F7-6A986CA26461"
            },
            {
              "criteria": "cpe:2.3:a:f-secure:linux_security_64:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5E48AF8-57C4-4DFB-9E64-E3B3352941E9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve-notifications-us@f-secure.com"
}