CVE-2022-43747

EUVD-2022-46724 · Published Oct 26, 2022

baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update S-2022-01, which contains fixed bMA setup files for these versions. This also is fixed in baramundi Management Suite 2022 R2.

Technologies

Baramundi Management Suite

CVSS scores

v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://www.baramundi.com/de-de/security-info/s-2022-01/
https://www.baramundi.com/en-us/security-info/s-2022-01/

Potentially impacted assets

See if this affects your attack surface