Elements Endpoint Protection
CVE-2022-28877
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.
AnalysisAI
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation. Affected products include: F-Secure Elements Endpoint Protection.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Elements Endpoint Protection
View allWithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. Rated high severity (CV
Certain WithSecure products allow Local Privilege Escalation. Rated high severity (CVSS 7.8), this vulnerability is low
Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. Rated high severity (CV
Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanni
Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of ser
Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. Ra
Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. Rated high severity (CVSS 7.5
Certain WithSecure products allow Denial of Service in the aeelf component. Rated high severity (CVSS 7.5), this vulnera
Certain WithSecure products allow Denial of Service (infinite loop). Rated high severity (CVSS 7.5), this vulnerability
Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. Rated high severity (CVSS 7.5), this vulnera
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. Rated high severity
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. Rated high severity
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today