CVE-2022-28875: Denial-of-Service (DoS) Vulnerability

Published May 25, 2022

Updated

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Affected Software

9 affected components

F-Secure Atlant

F-Secure Cloud Protection For Salesforce

F-Secure Elements Collaboration Protection

F-Secure Internet Gatekeeper

F-Secure Linux Security

F-Secure Elements Endpoint Detection And Response

F-Secure Elements Endpoint Protection

Apple macOS

Microsoft Windows

Remediation

Information

FIX No User action is required. The required fix has been published through automatic update channel with Capricorn database on 2022-05-16_12

Event History

May 25, 2022

CVE Published

via MITRE·03:09 PM

Data Sourced

via MITRE·03:09 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-28875.

What is the severity of CVE-2022-28875?

The severity of CVE-2022-28875 is medium (CVSS score 6.5).

Which products are affected by CVE-2022-28875?

The following products are affected by CVE-2022-28875: F-Secure Atlant, F-Secure Cloud Protection For Salesforce, F-Secure Elements Collaboration Protection, F-Secure Internet Gatekeeper, F-Secure Linux Security, F-Secure Elements Endpoint Detection And Response, F-Secure Elements Endpoint Protection.

Can the vulnerability be exploited remotely?

Yes, the vulnerability can be exploited remotely by an attacker.

How do I fix CVE-2022-28875?

The vendor has released patches and updates to address CVE-2022-28875. It is recommended to install the latest updates from the vendor.