CVE-2022-37772

Published: Nov 23, 2022Modified: Jul 9, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts.

Affected (2)

Products: Maarch: Maarch Rm

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Maarch Maarch Rm	From 2.8 to 2.8.6
Maarch Maarch Rm	Version 2.9

Related CWEs

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.