PT-2022-19281 · F Secure+1 · F-Secure+1

Published 2022-07-21 · Updated 2022-07-27 · CVE-2022-28877

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions F-Secure & WithSecure windows endpoint products (affected versions not specified)

Description This issue allows a local user to delete arbitrary files in the system and bypass security protection, which can be abused for local privilege escalation. An attacker must have code execution rights on the victim machine prior to successful exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-28877

Affected Products

F-Secure

Withsecure

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-28877 · Security Note
• https://f-secure.com/en/business/support-and-downloads/security-advisories · Vendor Advisory
• https://withsecure.com/en/support/security-advisories · Vendor Advisory
• https://t.me/cibsecurity/46756 · Telegram Post