Vulnerability · Published Sep 6, 2022 · Assigned by ESET
CVE-2022-2402Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows
Medium 6.5
In plain English
A medium-severity stack buffer overflow in ESET Endpoint Encryption from ESET, spol. s r.o.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 90.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s r.o. | ESET Endpoint Encryption | 5.1.1.14 – before 5.1.2.26 |
| ESET, spol. s r.o. | ESET Full Disk Encryption | 1.3.1.25 – before 1.3.2.32 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H