{"id":"CVE-2022-45871","aliases":["EUVD-2022-48723","GHSA-rh6c-rgq8-jq7m"],"status":"published","title":"Denial-of-Service (DoS) Vulnerability","description":"A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00412,"percentile":0.35961,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2022-12-13T00:00:00Z","modified":"2026-06-17T05:10:54Z","products":[{"vendor":"f-secure","product":"atlant"}],"references":[{"url":"https://www.withsecure.com/en/support/security-advisories","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45871"},{"url":"https://www.withsecure.com/en/support/security-advisories/cve-2022-45871"},{"url":"https://www.withsecure.com/no-en/solutions/software-and-services/business-suite/client-security"},{"url":"https://github.com/advisories/GHSA-rh6c-rgq8-jq7m"}],"sources":{"cve":[{"id":"CVE-2022-45871","title":"Denial-of-Service (DoS) Vulnerability","description":"A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker.","status":"published","published":"2022-12-13T00:00:00Z","modified":"2025-04-22T14:57:26.724Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:31.519788Z"}],"euvd":[{"id":"EUVD-2022-48723","description":"A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker.","status":"published","published":"2022-12-13T00:00:00Z","modified":"2025-04-22T14:57:26Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:17.280298Z"}],"ghsa":[{"id":"GHSA-rh6c-rgq8-jq7m","title":"WithSecure DeepGuard 6 allows attackers to affect confidentiality, availability, and/or integrity.","description":"WithSecure DeepGuard 6 allows attackers to affect confidentiality, availability, and/or integrity.","status":"published","published":"2022-12-13T15:30:27Z","modified":"2025-04-22T15:31:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:59.076415Z"}],"nvd":[{"id":"CVE-2022-45871","description":"A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker.","status":"published","published":"2022-12-13T15:15:11.527Z","modified":"2026-06-17T05:10:54.057Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:33.649381Z"}]}}