Lucene search

HpeCVE-2017-12493

HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-12493

2018-02-1522:29:01

CWE-20

hpe

web.nvd.nist.gov

cve-2017-12493

hpe

intelligent management center

imc

plat

remote code execution

vulnerability

patch

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.248

Percentile

96.7%

JSON

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

Affected configurations

Nvd

Node

hpintelligent_management_centerMatch7.3e0504

VendorProductVersionCPE
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0504:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	intelligent_management_center	7.3	cpe:2.3:a:hp:intelligent_management_center:7.3:e0504::::::

CNA Affected

[
  {
    "product": "Intelligent Management Center (iMC) PLAT",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "PLAT 7.3 (E0504)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/100367

www.securitytracker.com/id/1039152

support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.248

Percentile

96.7%

JSON

Related for CVE-2017-12493