Lucene search

K
cve[email protected]CVE-2017-12552
HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-12552

2018-02-1522:29:00
NVD-CWE-noinfo
web.nvd.nist.gov
36
cve-2017-12552
local execution
command vulnerability
hpe system management homepage
windows
linux

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

26.1%

A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

26.1%

Related for CVE-2017-12552