PT-2022-24062 · Maarch Rm · Maarch Rm

François Mehault · Published 2022-11-23 · Updated 2025-04-25 · CVE-2022-37772

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Maarch RM version 2.8.3

Description The issue is related to an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. This could allow an unauthenticated remote attacker to potentially exploit the issue, leading to compromised accounts.

Recommendations For Maarch RM version 2.8.3, consider implementing rate limiting or IP blocking to restrict excessive authentication attempts as a temporary workaround until a patch is available. Restrict access to the authentication module to minimize the risk of exploitation. Avoid using verbose responses in the application to reduce the attack surface.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2022-37772

Affected Products

Maarch Rm

References · 7

• 🔥 https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-37772 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37772 · Security Note
• https://t.me/cibsecurity/53385 · Telegram Post
• https://t.me/cvenotify/119887 · Telegram Post
• http://maarch.com · Note
• https://t.me/cvenotify/38547 · Telegram Post