CVE-2022-28877
Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Jul 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Affected products
F-Secure and WithSecure · All F-Secure and WithSecure Endpoint Protection Products for WindowsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →