CVE-2022-43747 : baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and

baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in 2022 R2.

Published 2022-10-26 04:15:14

Updated 2022-12-06 21:48:38

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2022-43747

Baramundi » Management Suite » Version: 2022 Update R1
cpe:2.3:a:baramundi:management_suite:2022:r1:*:*:*:*:*:*
Matching versions
Baramundi » Management Suite » Version: 2021 Update R1
cpe:2.3:a:baramundi:management_suite:2021:r1:*:*:*:*:*:*
Matching versions
Baramundi » Management Suite » Version: 2021 Update R2
cpe:2.3:a:baramundi:management_suite:2021:r2:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-43747

EPSS FAQ

1.41%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-43747

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	1.6	5.9	MITRE
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2022-43747

https://www.baramundi.com/de-de/security-info/s-2022-01/

S-2022-01 ｜ baramundi
Vendor Advisory

Jump to

Vulnerability Details : CVE-2022-43747

Products affected by CVE-2022-43747

Exploit prediction scoring system (EPSS) score for CVE-2022-43747

CVSS scores for CVE-2022-43747

References for CVE-2022-43747