PT-2023-24779 · Bmc · Bmc Patrol

Guillaume Quéré · Published 2023-05-31 · Updated 2025-01-10 · CVE-2023-34257

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BMC Patrol versions through 23.1.00

Description An issue was discovered where the agent's configuration can be remotely modified, and by default, authentication is not required. Some configuration fields related to SNMP, such as masterAgentName or masterAgentStartLine, result in code execution when the agent is restarted.

Recommendations For BMC Patrol versions through 23.1.00, consider implementing authentication to prevent remote modification of the agent's configuration as a mitigation measure. Restrict access to configuration fields related to SNMP to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2023-34257

Affected Products

Bmc Patrol

References · 5

• 🔥 https://errno.fr/PatrolAdvisory.html#remote-code-excution-using-patrols-pconfig · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-34257 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34257 · Vendor Advisory
• https://t.me/cvenotify/58923 · Telegram Post
• https://t.me/cvenotify/88578 · Telegram Post