Lucene search

K
cveMitreCVE-2023-37605
HistoryOct 02, 2023 - 7:15 p.m.

CVE-2023-37605

2023-10-0219:15:10
CWE-755
mitre
web.nvd.nist.gov
26
vulnerability
baramundi software
emm agent
denial of service
crafted request
cve-2023-37605

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

9.0%

Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter.

Affected configurations

Nvd
Node
baramundienterprise_mobility_managementRange23.1.50
VendorProductVersionCPE
baramundienterprise_mobility_management*cpe:2.3:a:baramundi:enterprise_mobility_management:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2023-37605