Lucene search

K
cve[email protected]CVE-2013-3576
HistoryJun 14, 2013 - 6:55 p.m.

CVE-2013-3576

2013-06-1418:55:00
CWE-78
web.nvd.nist.gov
53
nvd
cve-2013-3576
hp system management homepage
smh
remote authentication
shell metacharacters
security vulnerability

7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.465 Medium

EPSS

Percentile

97.4%

ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.

7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.465 Medium

EPSS

Percentile

97.4%