CVE-2022-2402mediumCWE-121

CVE-2022-2402: medium-severity vulnerability in ESET Endpoint Encryption

Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows

Published · Updated

Follow this CVE+ Monitor ESET Endpoint Encryption+ Monitor ESET Full Disk Encryption

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.2%
The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected products
ESET, spol. s r.o. · ESET Endpoint EncryptionESET, spol. s r.o. · ESET Full Disk Encryption