CVE-2022-28877 - CVE House
Back to Database
Status published Medium CVE-2022-28877

Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products

Vulnerability Description

This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-28877

Credits & Attribution

No credits recorded in the NVD database.

References

More from F-Secure and WithSecure

View All →
CVE-2022-28887
Multiple Denial of Service Vulnerability
Medium 4.3
CVE-2022-28886
Denial-of-Service (DoS) Vulnerability
Medium 4.3
CVE-2022-28884
Denial-of-Service (DoS) Vulnerability
Medium 4.3
CVE-2022-28883
Denial-of-Service (DoS) Vulnerability
Low 3.5
CVE-2022-28882
Denial-of-Service (DoS) Vulnerability
Medium 4.3

Affected Vendor

F-Secure and WithSecure

View all reports →

Affected Software

All F-Secure and WithSecure Endpoint Protection Products for Windows
Vulnerable Versions:
All Version

Timeline

Official Publish: July 21st, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.