CVE-2022-28883

highpriority · track · 30EPSS 0.006 · 49 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.60% (49th) EPSS

CVSS 7.5 · high

Is it mine?

8 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 3.5–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.13.5lowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:Lsecondary · ENISA EU

v3.13.5lowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:Lsecondary · cve-notifications-us@f-secure.comexploitability 0.9 · impact 2.5

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USLLM-inferredCWE-400USLLM-inferred

affected products (8)

Products and version ranges known to be affected.

F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection≤ All Versionenisa_euvdEU
f-secure atlantall versionsnvdUScpe:2.3:a:f-secure:atlant:*:*:*:*:*:*:*:*
f-secure cloud protection for salesforceall versionsnvdUScpe:2.3:a:f-secure:cloud_protection_for_salesforce:*:*:*:*:*:*:*:*
f-secure elements collaboration protectionall versionsnvdUScpe:2.3:a:f-secure:elements_collaboration_protection:*:*:*:*:*:*:*:*
f-secure elements endpoint protectionall versionsnvdUScpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
f-secure internet gatekeeperall versionsnvdUScpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:*
f-secure linux securityall versionsnvdUScpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:*:*
f-secure linux security 64all versionsnvdUScpe:2.3:a:f-secure:linux_security_64:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2022-08-23modified 2026-06-17

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan