CVE-2022-43747
published 2022-10-26CVE-2022-43747: baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update…
PriorityP354critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.14%
66.4th percentile
baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update S-2022-01, which contains fixed bMA setup files for these versions. This also is fixed in baramundi Management Suite 2022 R2.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| baramundi | management_suite | — | — |
| baramundi | management_suite | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
baramundi Management Suite 2021 R1/2021 R2/2022 R1 Management Agent privilege escalation (EUVD-2022-46724)
vuldb·2026-09-13·CVSS 9.8
CVE-2022-43747 [CRITICAL] baramundi Management Suite 2021 R1/2021 R2/2022 R1 Management Agent privilege escalation (EUVD-2022-46724)
A vulnerability described as critical has been identified in baramundi Management Suite 2021 R1/2021 R2/2022 R1. The impacted element is an unknown function of the component Management Agent. Such manipulation leads to privilege escalation.
This vulnerability is uniquely identified as CVE-2022-43747. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
GHSA
GHSA-579p-8xww-r227: baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution
ghsa_unreviewed·2022-10-26
CVE-2022-43747 [CRITICAL] GHSA-579p-8xww-r227: baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution
baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in 2022 R2.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-26
Published