PT-2024-11526 · Ysoft · Y Soft Safeq

Mbadanoiu · Published 2024-10-22 · Updated 2024-10-30 · CVE-2022-23862

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Y Soft SAFEQ version 6 Build 53

Description A Local Privilege Escalation issue was discovered. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the "NT AuthoritySystem" user, an attacker is able to use the issue to execute arbitrary code and elevate to the system user.

Recommendations For Y Soft SAFEQ version 6 Build 53, consider disabling the SafeQ JMX service running on port 9696 as a temporary workaround until a patch is available. Restrict access to the SafeQ JMX service to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2022-23862

Affected Products

Y Soft Safeq

References · 7

• 🔥 https://github.com/mbadanoiu/CVE-2022-23862/blob/main/SafeQ%20-%20CVE-2022-23862.pdf · Exploit
• 🔥 https://github.com/mbadanoiu/CVE-2022-23862 · Exploit
• https://osv.dev/vulnerability/CVE-2022-23862 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23862 · Security Note
• https://t.me/cvedetector/8625 · Telegram Post
• https://twitter.com/CVEnew/status/1848797771949646166 · Twitter Post
• https://ysoft.com · Note