CVEvulnerability
CVE-2022-28881
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.
Affected configurations
• f-secure elements endpoint detection and response
• f-secure elements endpoint protection
• f-secure atlant
• f-secure cloud protection for salesforce
• f-secure elements collaboration protection
• f-secure internet gatekeeper
• f-secure linux security
• f-secure linux security 64
References
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories Vendor Advisory
- https://www.withsecure.com/en/support/security-advisories Vendor Advisory
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories Vendor Advisory
- https://www.withsecure.com/en/support/security-advisories Vendor Advisory