CVE-2022-28877— Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-28877
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products
Source: NVD (National Vulnerability Database)
Vulnerability Description
This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WithSecure Endpoint Protection 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WithSecure Endpoint Protection是芬兰WithSecure公司的一种云原生、AI 支持的端点保护。可以从浏览器即时部署，并从单个控制台轻松管理。 WithSecure Endpoint Protection 存在安全漏洞，该漏洞源于允许本地用户删除系统中的任意文件并绕过安全保护，可在受影响的F-Secure和WithSecure Windows Endpoint产品上滥用本地权限升级。攻击者必须在受害者机器上拥有代码执行权才能成功利用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| F-Secure and WithSecure | All F-Secure and WithSecure Endpoint Protection Products for Windows | All Version | - |
II. Public POCs for CVE-2022-28877
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-28877
请登录查看更多情报信息。
- https://www.withsecure.com/en/support/security-advisoriesx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-28877
IV. Related Vulnerabilities
V. Comments for CVE-2022-28877
No comments yet