« Volver al listado

CVE-2022-43747

Estado: ModificadaCrítica (9.8)—

baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update S-2022-01, which contains fixed bMA setup files for these versions. This also is fixed in baramundi Management Suite 2022 R2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Baramundi — Management Suite

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-43747",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-43747",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-16T18:25:03.412804Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@mitre.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.6
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:baramundi:management_suite:2021:r1:*:*:*:*:*:*"
          ],
          "vendor": "baramundi",
          "product": "management_suite",
          "versions": [
            {
              "status": "affected",
              "version": "2021"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:baramundi:management_suite:2021:r2:*:*:*:*:*:*"
          ],
          "vendor": "baramundi",
          "product": "management_suite",
          "versions": [
            {
              "status": "affected",
              "version": "2021"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:baramundi:management_suite:2022:r1:*:*:*:*:*:*"
          ],
          "vendor": "baramundi",
          "product": "management_suite",
          "versions": [
            {
              "status": "affected",
              "version": "2022"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2022-10-26T04:15:13.867",
  "references": [
    {
      "url": "https://www.baramundi.com/de-de/security-info/s-2022-01/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.baramundi.com/en-us/security-info/s-2022-01/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.baramundi.com/de-de/security-info/s-2022-01/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.baramundi.com/en-us/security-info/s-2022-01/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update S-2022-01, which contains fixed bMA setup files for these versions. This also is fixed in baramundi Management Suite 2022 R2."
    },
    {
      "lang": "es",
      "value": "baramundi Management Agent (bMA) en baramundi Management Suite (bMS) versiones 2021 R1 y R2 y 2022 R1, permite una ejecución de código remota. Esto ha sido corregido en versión 2022 R2"
    }
  ],
  "lastModified": "2026-06-17T05:07:14.033",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:baramundi:management_suite:2021:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4ED5926E-4CCB-4373-8F92-D381D9DC1742"
            },
            {
              "criteria": "cpe:2.3:a:baramundi:management_suite:2021:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CBC5F91-B404-4CBF-912D-A473B430DA93"
            },
            {
              "criteria": "cpe:2.3:a:baramundi:management_suite:2022:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FFE480C-7343-48B1-A2C9-B6A51237C67C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}