PT-2022-17734 · Beckman Coulter · Remisol Advance

Published 2022-10-06 · Updated 2022-10-10 · CVE-2022-26239

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Beckman Coulter Remisol Advance versions 2.0.12.1 and prior

Description The default privileges for the running service Normand License Manager allow unprivileged users to overwrite and manipulate executables and libraries, enabling attackers to access sensitive data.

Recommendations For versions 2.0.12.1 and prior, consider restricting access to the Normand License Manager service to prevent unprivileged users from overwriting and manipulating executables and libraries until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-26239

Affected Products

Remisol Advance

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-26239 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26239 · Vendor Advisory
• https://pastebin.com/1QEHrj01 · Note
• https://t.me/cibsecurity/50902 · Telegram Post
• https://beckmancoulter.com/products/clinical-information-management-tools/remisol-advance · Note