Lucene search

[email protected]CVE-2022-43747

HistoryOct 26, 2022 - 4:15 a.m.

CVE-2022-43747

2022-10-2604:15:13

[email protected]

web.nvd.nist.gov

baramundi

management agent

remote code execution

vulnerability

2022 r2

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.7%

JSON

baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update S-2022-01, which contains fixed bMA setup files for these versions. This also is fixed in baramundi Management Suite 2022 R2.

Affected configurations

NVD

Node

baramundimanagement_suiteMatch2021r1

baramundimanagement_suiteMatch2021r2

baramundimanagement_suiteMatch2022r1

CPENameOperatorVersion
baramundi:management_suitebaramundi management suiteeq2021
baramundi:management_suitebaramundi management suiteeq2022

CPE	Name	Operator	Version
baramundi:management_suite	baramundi management suite	eq	2021
baramundi:management_suite	baramundi management suite	eq	2022

References

www.baramundi.com/de-de/security-info/s-2022-01/

www.baramundi.com/en-us/security-info/s-2022-01/

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.7%

JSON

Related for CVE-2022-43747

prion1 nvd1 cvelist1