PT-2023-14745 · Unknown · Global Facilities Management

Published 2023-02-10 · Updated 2025-03-24 · CVE-2022-45766

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Global Facilities Management Software (GFMS) Version 3

Description The issue concerns hardcoded credentials in the software, allowing remote attackers to impact the availability, confidentiality, accessibility, and dependability of electronic key boxes.

Recommendations For Global Facilities Management Software (GFMS) Version 3, consider changing the hardcoded credentials to unique, secure credentials to prevent unauthorized access. As a temporary workaround, restrict access to the electronic key boxes to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Memory Corruption

Weakness Enumeration

CWE-798

CWE-787

Related Identifiers

CVE-2022-45766

Affected Products

Global Facilities Management

References · 4

• https://osv.dev/vulnerability/CVE-2022-45766 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45766 · Security Note
• https://t.me/cvenotify/115943 · Telegram Post
• https://girlslearncyber.com/post/the-key-to-keeping-keys-safe · Note