F-Secure Elements Endpoint Detection And Response vulnerabilities

8 CVEs affecting F-Secure Elements Endpoint Detection And Response, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-28887, published 2022-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-40837, published 2022-02-09. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be…
CVE-2021-40832, published 2021-10-08. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files. The…
CVE-2021-33603, published 2021-10-08. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit…
CVE-2022-28875, published 2022-05-25. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can…
CVE-2022-28881, published 2022-08-10. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine…
CVE-2022-28880, published 2022-08-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The…
CVE-2021-40836, published 2021-12-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A…
CVE-2022-28887, published 2022-10-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine…