VulnerabilityModified

CVE-2022-21170

Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILTER Browser & Cloud MultiAgent for Windows Ver.4.93R04 and earlier, and D-SPA (Ver.3 / Ver.4) using i-FILTER allows a remote…

LOW 3.7EPSS 0.98%

Does this matter?

Lower severity and a low EPSS score (0.98%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 3.7 LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.98% probability · 60th percentile
CISA KEV: Not listed
Weakness: CWE-295
Affected: daj/i-filter browser \& cloud multiagent · daj/i-filter
Source: vultures@jpcert.or.jp

References

https://download.daj.co.jp/user/dspa/V3/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/dspa/V4/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/ifb/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/ifilter/V10/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/ifilter/V9/Permissions Required, Vendor Advisory
https://jvn.jp/en/jp/JVN33214411/index.htmlThird Party Advisory, VDB Entry
https://download.daj.co.jp/user/dspa/V3/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/dspa/V4/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/ifb/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/ifilter/V10/Permissions Required, Vendor Advisory
https://download.daj.co.jp/user/ifilter/V9/Permissions Required, Vendor Advisory
https://jvn.jp/en/jp/JVN33214411/index.htmlThird Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.