CVE-2022-2402

CVSS V2 None CVSS V3 Medium 6.5

Description

The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.

Overview

CVE ID
CVE-2022-2402

Assigner
security@eset.com

Vulnerability Status
Analyzed

Published Version
2022-09-06T18:15:13

Last Modified Date
2022-09-09T02:38:53

Weakness Enumerations

CWE	URL
CWE-787	http://cwe.mitre.org/data/definitions/787.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:eset:endpoint_encryption::::::::	1	OR		5.1.2.26
cpe:2.3:a:eset:full_disk_encryption::::::::	1	OR		1.3.2.32

CVSS Version 3

Version
3.1

Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Attack Vector
LOCAL

Attack Compatibility
LOW

Privileges Required
LOW

User Interaction
NONE

Scope
CHANGED

Confidentiality Impact
NONE

Availability Impact
HIGH

Base Score
6.5

Base Severity
MEDIUM

Exploitability Score
2

Impact Score
4

References

Reference URL	Reference Tags
https://support.eset.com/en/ca8298-vulnerability-fixed-in-eset-endpoint-encryption-and-eset-full-disk-encryption-for-windows

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-2402
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2402

History

Created	Old Value	New Value	Data Type	Notes
2022-09-06 19:00:12				Added to TrackCVE