Search/CVE-2023-34258
● CVE — High

CVE-2023-34258

VendorbmcProductpatrolDiscoveredMay 31, 2023UpdatedJan 8, 2025

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.

View graph Watch Export
CVSS v3.1
7.5 HIGH
EPSS
0.81%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Connections
2 relationships
Timeline
disclosure → media coverage
May 31, 2023
Disclosure — published as a CVE record. · last revised by NVD Jan 8, 2025