PT-2022-12676 · Unknown · Trigone Remote System Monitor

Published 2022-02-17 · Updated 2022-02-25 · CVE-2021-46368

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRIGONE Remote System Monitor version 3.61

Description The issue allows local users to launch processes with elevated privileges due to an unquoted path service. This can lead to unauthorized access and potential system compromise.

Recommendations For TRIGONE Remote System Monitor version 3.61, consider updating to a newer version that addresses the unquoted path service issue to prevent local users from launching processes with elevated privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-46368

Affected Products

Trigone Remote System Monitor

References · 6

• 🔥 https://packetstormsecurity.com/files/165404/TRIGONE-Remote-System-Monitor-3.61-Unquoted-Service-Path.html · Exploit
• 🔥 https://exploit-db.com/exploits/50633 · Exploit
• https://osv.dev/vulnerability/CVE-2021-46368 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46368 · Security Note
• https://t.me/cvenotify/26897 · Telegram Post
• https://t.me/cibsecurity/37650 · Telegram Post