CVE-2022-28881
Last modified
CVE-2022-28881 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| F-Secure | Elements Endpoint Detection And Response | All versions |
| F-Secure | Elements Endpoint Protection | All versions |
| F-Secure | Atlant | All versions |
| F-Secure | Cloud Protection For Salesforce | All versions |
| F-Secure | Elements Collaboration Protection | All versions |
| F-Secure | Internet Gatekeeper | All versions |
| F-Secure | Linux Security | All versions |
| F-Secure | Linux Security 64 | All versions |
References
- https://www.withsecure.com/en/support/security-advisoriesVendor Advisory
- https://www.withsecure.com/en/support/security-advisoriesVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-28881?
How severe is CVE-2022-28881?
How do I fix CVE-2022-28881?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-28876A Denial-of-Service (DoS) vulnerability was discovered in F-…7.5
- CVE-2022-28877This vulnerability allows local user to delete arbitrary fil…6.7
- CVE-2022-28878A Denial-of-Service vulnerability was discovered in the F-Se…7.5
- CVE-2022-28879A Denial-of-Service (DoS) vulnerability was discovered in F-…7.5
- CVE-2022-2888If an attacker comes into the possession of a victim's OctoP…4.4
- CVE-2022-28880A Denial-of-Service vulnerability was discovered in the F-Se…7.5
- CVE-2022-28882A Denial-of-Service (DoS) vulnerability was discovered in F-…7.5
- CVE-2022-28883A Denial-of-Service (DoS) vulnerability was discovered in F-…7.5
- CVE-2022-28884A Denial-of-Service vulnerability was discovered in the F-Se…7.5
- CVE-2022-28885A Denial-of-Service (DoS) vulnerability was discovered in th…7.5
- CVE-2022-28886A Denial-of-Service vulnerability was discovered in the F-Se…5.5
- CVE-2022-28887Multiple Denial-of-Service (DoS) vulnerability was discovere…7.5
Are you affected by CVE-2022-28881?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST