Care Everywhere Gateway
Monthly
Remote code execution in Care Everywhere Gateway 14.3.10 stems from hard-coded, install-invariant credentials in its bundled WildFly 8.2.0.Final management interface (port 20990), letting unauthenticated remote attackers log into the management console and deploy a malicious WAR to run code as the Windows machine account. The affected 14.x branch reached end-of-life in 2017 and later releases remediate the issue. Publicly available exploit code exists (VulnCheck), and given AV:N/AC:L/PR:N/UI:N the barrier to exploitation is minimal, though this is not listed in CISA KEV.
Remote code execution in Care Everywhere Gateway 14.3.10 stems from hard-coded, install-invariant credentials in its bundled WildFly 8.2.0.Final management interface (port 20990), letting unauthenticated remote attackers log into the management console and deploy a malicious WAR to run code as the Windows machine account. The affected 14.x branch reached end-of-life in 2017 and later releases remediate the issue. Publicly available exploit code exists (VulnCheck), and given AV:N/AC:L/PR:N/UI:N the barrier to exploitation is minimal, though this is not listed in CISA KEV.