CVE-2007-2136: Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to exec...

Security readout for executives and security teams

CVE-2007-2136 is a remotely reachable memory corruption flaw in BMC Patrol PerformAgent. A vulnerable service could be crashed or potentially used to run attacker-controlled code. Business urgency depends on whether this legacy monitoring component is still deployed and reachable from untrusted networks. Exposure is most likely where BMC Patrol PerformAgent is installed and bgs_sdservice.exe is listening on TCP port 10128. Internet-facing or broadly reachable management networks raise concern. The bundle does not identify affected versions or CPEs. Treat as high priority if the product is present, because the described impact is remote code execution. Prioritize discovery first; urgency drops only after confirming the service is absent, patched, or tightly isolated. Mitigation focus: Identify any BMC Patrol PerformAgent deployments and service owners.; Restrict TCP port 10128 to trusted management hosts only.; Check BMC or advisory guidance for fixed versions or supported replacements..

Prepared

Jun 29, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.