What is CVE-2021-33572?

CVE-2021-33572 is a low-severity vulnerability in F-Secure Cloud Protection For Salesforce, classified under NULL Pointer Dereference. CVSS score: 3.5/10. Published 2021-06-21.

How severe is CVE-2021-33572?

Low severity. CVSS v3 base score is 3.5 out of 10.

NULL pointer dereference in F-Secure Cloud Protection For Salesforce

CVE-2021-33572

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.

Published 2021-06-21 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N.

EPSS exploit prediction

EPSS: 0.007 (52.4th percentile), scored 2026-10-31.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 52nd percentile — 52.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000

Affected products

F-Secure Cloud Protection For Salesforce
F-Secure Elements For Microsoft 365
F-Secure Endpoint Protection
F-Secure Products — versions All Version
F-Secure Linux Security

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame (Product)
www.f-secure.com/en/business/support-and-downloads/security-advisories (Vendor Advisory)

Frequently asked questions

What is CVE-2021-33572?: CVE-2021-33572 is a low-severity vulnerability in F-Secure Cloud Protection For Salesforce, classified under NULL Pointer Dereference. CVSS score: 3.5/10. Published 2021-06-21.
How severe is CVE-2021-33572?: Low severity. CVSS v3 base score is 3.5 out of 10.