CVE-2022-45871

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.withsecure.com/en/support/security-advisories	Third Party Advisory
https://www.withsecure.com/en/support/security-advisories	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:f-secure:atlant:-:*:*:*:*:*:*:*

History

22 Apr 2025, 15:16

Type	Values Removed	Values Added
CWE		CWE-20

Information

Published : 2022-12-13 15:15

Updated : 2025-04-22 15:16

NVD link : CVE-2022-45871

Mitre link : CVE-2022-45871

CVE.ORG link : CVE-2022-45871

JSON object : View

Products Affected

f-secure

atlant

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"id": "CVE-2022-45871", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-12-13T15:15:11.527", "references": [{"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker."}, {"lang": "es", "value": "Se descubri\u00f3 una vulnerabilidad de Denegaci\u00f3n de Servicio (DoS) en el componente fsicapd utilizado en los productos WithSecure por la cual el servicio puede fallar al analizar la solicitud ICAP. Un atacante puede activar el exploit de forma remota."}], "lastModified": "2025-04-22T15:16:05.497", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:atlant:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A8AF772-E3DC-4C9B-B3E8-81103D3B7BC4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}