PT-2022-27661 · Withsecure · Withsecure

Published 2022-12-13 · Updated 2022-12-16 · CVE-2022-45871

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WithSecure products (affected versions not specified)

Description A Denial-of-Service (DoS) issue was found in the fsicapd component, which can cause the service to crash when parsing an ICAP request. This can be triggered remotely by an attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-45871

Affected Products

Withsecure

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-45871 · Security Note
• https://withsecure.com/en/support/security-advisories · Note
• https://t.me/cvenotify/40017 · Telegram Post