CVE-2023-42525: withsecure client security +6 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-42525

CVSS 7.5 · High EPSS 0,62%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada withsecure client security, withsecure elements endpoint protection +5 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

Rincian

Terbit di NVD: 18 September 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
EPSS (30 hari): 0,62% peluang dieksploitasi; lebih tinggi dari 48,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
withsecure	client security	Versi 15
withsecure	elements endpoint protection	Versi 17 dan sesudahnya
withsecure	email and server security	Versi 15
withsecure	server security	Versi 15
withsecure	linux protection	Versi 12.0
withsecure	linux security 64	Versi 12.0
withsecure	atlant	Versi 1.0.35-1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.withsecure.com/en/support/security-advisories advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.