CVE-2022-21170

EPSS 0.9%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.9%KEV nãoPoC —Patch —

Lifecycle

07 Mar 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILTER Browser & Cloud MultiAgent for Windows Ver.4.93R04 and earlier, and D-SPA (Ver.3 / Ver.4) using i-FILTER allows a remote unauthenticated attacker to conduct a man-in-the-middle attack and eavesdrop on an encrypted communication.

Affected products

Digital Arts Inc. · i-FILTER, i-FILTER Browser & Cloud MultiAgent for Windows, and D-SPA using i-FILTER

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://download.daj.co.jp/user/dspa/V3/https://download.daj.co.jp/user/dspa/V4/https://download.daj.co.jp/user/ifb/https://download.daj.co.jp/user/ifilter/V10/https://download.daj.co.jp/user/ifilter/V9/https://jvn.jp/en/jp/JVN33214411/index.html