CVE-2022-3229 — Unified Intents AB / Unified Remote

Description (CNA)

Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker can change or disable authentication requirements for the Unified Remote protocol, and leverage this now-unauthenticated access to run code of the attacker's choosing.

Affected (CNA)

Vendor / product	Versions
Unified Intents AB / Unified Remote	affected 0 through 3.11.0.2483 (50)

CWE

CWE-285

References

https://github.com/rapid7/metasploit-framework/pull/16989

ADP enrichment

CVE

No English description supplied.

https://github.com/rapid7/metasploit-framework/pull/16989

CISA-ADP

No English description supplied.

No references supplied.