What is CVE-2022-37772?

CVE-2022-37772 is a high-severity vulnerability in Maarch Rm, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 7.5/10. Published 2022-11-23.

How severe is CVE-2022-37772?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2022-37772 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Maarch Rm

CVE-2022-37772

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts.

EPSS: 0.011 (62.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Maarch Maarch_rm — versions 2.9
N/a — versions n/a

Weakness classification (CWE)

CWE-307 — Improper Restriction of Excessive Authentication Attempts

Public proof-of-concept exploits

frame84/vulns

References

af854a3a-2127-422b-91ae-364da2661108 (Product)
cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2022-37772?: CVE-2022-37772 is a high-severity vulnerability in Maarch Rm, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 7.5/10. Published 2022-11-23.
How severe is CVE-2022-37772?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2022-37772 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.