CVE:CVE-2023-30262
CNNVD:CNNVD-202306-725
MIM Software是美国MIM Software公司的一款远程访问应用程序。致力于帮助客户提供尽可能好的患者护理。
MIM License Server 和 MIMpacs services 存在安全漏洞。攻击者利用该漏洞通过 RMI 注册表服务可以执行任意代码。
solution:Upgrade mimsoftware mim_concurrent_license_server to a higher version than 7.0.9,and avoid the version [6.5.0,7.0.9]; Upgrade mimsoftware mim_local_concurrent_license_server to a higher version than 7.0.9,and avoid the version [6.5.0,7.0.9]