PT-2022-17735 · Beckman Coulter · Beckman Coulter Remisol Advance

Published 2022-10-06 · Updated 2022-10-11 · CVE-2022-26240

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Beckman Coulter Remisol Advance versions v2.0.12.1 and prior

Description The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance allow non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.

Recommendations For versions v2.0.12.1 and prior, consider restricting access to the Normand Message Buffer service to prevent non-privileged users from overwriting and manipulating executables and libraries until a patch is available.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-26240

Affected Products

Beckman Coulter Remisol Advance

References · 8

• https://cve.org/CVERecord?id=CVE-2022-26240 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-26240 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26240 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-26240 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-26240 · Vendor Advisory
• https://t.me/cibsecurity/50906 · Telegram Post
• https://beckmancoulter.com/products/clinical-information-management-tools/remisol-advance · Note
• https://pastebin.com/Bsy6KTxJ · Note