ESET Customer Advisory 2022-0012
July 27, 2022
Severity: Medium
Summary
ESET became aware of a vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows that enables a user logged into the system to cause a blue screen error (BSOD).
Details
The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.
To our best knowledge, no existing exploits take advantage of this vulnerability in the wild.
The CVE ID reserved by ESET for this vulnerability is CVE-2022-2402 and the CVSS v3.1 base score is 6.5 with the following vector: AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H.
Solution
ESET has released fixed versions of ESET Endpoint Encryption and ESET Full Disk Encryption for Windows. We recommend users of the earlier, affected versions schedule upgrades to the fixed versions as soon as possible.
For ESET Full Disk Encryption for Windows, ESET recommends upgrading from the ESET PROTECT console.
For ESET Endpoint Encryption for Windows, a reinstallation is recommended. Users can upgrade client machines to a later version of ESET Endpoint Encryption.
The issue is resolved in the following builds:
- ESET Endpoint Encryption 5.1.2.26
- ESET Full Disk Encryption 1.3.2.32
Affected programs and versions
- ESET Endpoint Encryption 5.1.1.14 and earlier
- ESET Full Disk Encryption 1.3.1.25 and earlier
Feedback & support
If you have feedback or questions about this issue, contact us via the ESET Security Forum or local ESET Technical Support.
Acknowledgment
ESET values the principles of coordinated disclosure within the security industry and would like to thank @SecAndStuff.
Version log
Version 1.0 (July 27, 2022): Initial version of this document
