PT-2022-17733 · Beckman Coulter · Remisol Advance

Published 2022-10-06 · Updated 2022-10-11 · CVE-2022-26238

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Beckman Coulter Remisol Advance versions 2.0.12.1 and prior

Description The default privileges for the running service Normand Service Manager allow non-privileged users to overwrite and manipulate executables and libraries, enabling attackers to access sensitive data.

Recommendations For versions 2.0.12.1 and prior, consider restricting access to the Normand Service Manager to prevent non-privileged users from overwriting and manipulating executables and libraries until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-26238

Affected Products

Remisol Advance

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-26238 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26238 · Vendor Advisory
• https://pastebin.com/23N5wcC7 · Note
• https://t.me/cibsecurity/50940 · Telegram Post
• https://beckmancoulter.com/products/clinical-information-management-tools/remisol-advance · Note