PT-2021-24050 · Reprise · Reprise Rlm

Published 2021-12-13 · Updated 2021-12-15 · CVE-2021-44153

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Reprise RLM version 14.2

Description: An issue was discovered that allows an admin user to enable an option to run arbitrary executables when editing the license file. This can be exploited by an attacker to run a malicious binary on startup or when triggering the Reread/Restart Servers function on the webserver. For example, an attacker could use an entry like C:WindowsSystem32calc.exe to demonstrate the issue.

Recommendations: For Reprise RLM version 14.2, consider disabling the option to run arbitrary executables from the license file as a temporary workaround until a patch is available. Restrict access to the license file editing functionality to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2021-44153

Affected Products

Reprise Rlm

References · 5

• 🔥 http://packetstormsecurity.com/files/165194/Reprise-License-Manager-14.2-Remote-Binary-Execution.html · Exploit
• https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44153 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44153 · Vendor Advisory
• https://t.me/cibsecurity/33791 · Telegram Post