VulnerabilityModified

CVE-2023-47172

Certain WithSecure products allow Local Privilege Escalation.

HIGH 7.8EPSS 0.22%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later.

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.22% probability · 12th percentile
CISA KEV: Not listed
Affected: withsecure/client security · withsecure/elements endpoint protection · withsecure/email and server security · withsecure/server security
Source: cve@mitre.org

References

https://www.withsecure.com/en/support/security-advisories/cve-2023-47172Vendor Advisory
https://www.withsecure.com/en/support/security-advisories/cve-2023-47172Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.