Remote Command Execution Vulnerability in BMC Remedy ITSM Suite
CVE-2019-16755

9.8CRITICAL

Key Information:

Vendor

Bmc

Status
Myit Digital Workplace
Vendor
CVE Published:
26 September 2019

What is CVE-2019-16755?

The BMC Remedy ITSM Suite contains vulnerabilities within its DWP and SmartIT components, enabling remote attackers to execute commands on the operating system without prior authentication. This jeopardizes the security of the affected systems across all service packs and versions.

References

https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?s...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.