CVE-2023-34258 is a high-severity vulnerability affecting BMC Patrol versions prior to 22.1.00. It allows an unauthenticated attacker to remotely query the agent's configuration, which contains the Patrol account password encrypted with a default AES key. This enables remote code execution with a CVSS score of 7.5. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for high impact due to remote code execution makes this a significant concern.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 22.1.00CPE matchmatch criteria | cpe:2.3:a:bmc:patrol:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.