Medium severity · published Jul 21, 2022
CVE-2022-28877
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected…
6.7
CVSS
0.4%
EPSS
No
On KEV
Description
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EE
Elements Endpoint Protection · F-secure
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-28877
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-28877
Vendor Advisory
https://www.f-secure.com/en/business/support-and-downloads/security-advisories
Vendor Advisory
https://www.withsecure.com/en/support/security-advisories
More from Elements Endpoint Protection
7.8
CVE-2023-43766
Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler
7.5
CVE-2023-49322
Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash
7.5
CVE-2023-43767
Certain WithSecure products allow Denial of Service via the aepack archive unpack handler
7.5
CVE-2023-43765
Certain WithSecure products allow Denial of Service in the aeelf component
7.5
CVE-2023-43761
Certain WithSecure products allow Denial of Service (infinite loop)
