Remote Code Execution in BMC Patrol Products
CVE-2023-34257

9.8CRITICAL

Key Information:

Vendor

Bmc

Status
Patrol Agent
Vendor
CVE Published:
31 May 2023

What is CVE-2023-34257?

A security issue has been identified in BMC Patrol where the agent's configuration may be altered remotely, without requiring authentication by default. Certain configuration parameters, particularly those concerning SNMP, may lead to the execution of arbitrary code upon restarting the agent. While the vendor has suggested that this should not be viewed as a vulnerability due to the option for authentication implementation, the default settings pose significant risks that could be exploited by malicious actors.

References

https://www.errno.fr/PatrolAdvisory.html#remote-code-excu...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.