CVE-2022-28877
Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
21 jul 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
F-Secure and WithSecure · All F-Secure and WithSecure Endpoint Protection Products for WindowsQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →