Lucene search

K
cve[email protected]CVE-2017-12551
HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-12551

2018-02-1522:29:00
NVD-CWE-noinfo
web.nvd.nist.gov
37
cve-2017-12551
hpe system management homepage
vulnerability
windows
linux
nvd

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

26.6%

A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

26.6%

Related for CVE-2017-12551