Lucene search

K
cve[email protected]CVE-2017-12546
HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-12546

2018-02-1522:29:04
CWE-119
web.nvd.nist.gov
37
cve-2017-12546
local buffer overflow
hpe
system management homepage
windows
linux
nvd

5.5 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:H/Au:S/C:C/I:C/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.7%

A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

Affected configurations

NVD
Node
hpsystem_management_homepageRange<7.6.1
AND
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-

CNA Affected

[
  {
    "product": "System Management Homepage for Windows and Linux",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 7.6.1"
      }
    ]
  }
]

5.5 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:H/Au:S/C:C/I:C/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.7%

Related for CVE-2017-12546