PT-2022-6352 · Unified Intents · Unified Remote

H00Die + 2 · Published 2022-09-21 · Updated 2025-03-25 · CVE-2022-3229

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unified Remote (affected versions not specified)

Description The web management interface for Unified Intents' Unified Remote solution does not require authentication, allowing a remote, unauthenticated attacker to change or disable authentication requirements for the Unified Remote protocol. This can be leveraged to run code of the attacker's choosing. The issue is related to an incorrect authorization procedure in the web management interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authorization

Missing Authentication

Weakness Enumeration

CWE-285

CWE-306

Related Identifiers

BDU:2023-01004

CVE-2022-3229

Affected Products

Unified Remote

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/pull/16989 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/unified_remote_rce.rb · Exploit
• https://bdu.fstec.ru/vul/2023-01004 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3229 · Security Note
• https://t.me/cvenotify/116112 · Telegram Post
• https://t.me/cibsecurity/57635 · Telegram Post
• https://t.me/cvenotify/43747 · Telegram Post