Vulnerability · Published Jul 21, 2022 · Assigned by F-SecureUS
CVE-2022-28877Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products
Medium 4.3
In plain English
A medium-severity security flaw in All F-Secure and WithSecure Endpoint Protection Products for Windows from F-Secure and WithSecure. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.4%top 62.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| F-Secure and WithSecure | All F-Secure and WithSecure Endpoint Protection Products for Windows | All Version |
References
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories x_refsource_MISC
- https://www.withsecure.com/en/support/security-advisories x_refsource_MISC