PT-2023-24779 · Bmc · Bmc Patrol

Guillaume Quéré · Publicado 2023-05-31 · Atualizado 2025-01-10 · CVE-2023-34257

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BMC Patrol versions through 23.1.00

Description An issue was discovered where the agent's configuration can be remotely modified, and by default, authentication is not required. Some configuration fields related to SNMP, such as masterAgentName or masterAgentStartLine, result in code execution when the agent is restarted.

Recommendations For BMC Patrol versions through 23.1.00, consider implementing authentication to prevent remote modification of the agent's configuration as a mitigation measure. Restrict access to configuration fields related to SNMP to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2023-34257

Produtos afetados

Bmc Patrol

Referências · 5

• 🔥 https://errno.fr/PatrolAdvisory.html#remote-code-excution-using-patrols-pconfig · Exploit
• https://t.me/cvenotify/58923 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-34257 · Nota de Segurança
• https://t.me/cvenotify/88578 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-34257 · Aviso do Fabricante