What’s Vulnerable › Vulnerabilities

CVE-2022-27089

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-11 · updated 2026-06-17
• Weakness: CWE-428

Description

In Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to potentially escalate privileges to system level.

Affected products

• Fujitsu Plugfree Network: through 7.3.0.3

References

• https://hansesecure.de/2022/03/schwachstelle-in-fujitsu-plugfree-network/
• https://hansesecure.de/2022/03/schwachstelle-in-fujitsu-plugfree-network/

Get alerted when CVE-2022-27089 or the next vulnerability affects your stack