CVE-2017-5815

🗓️ 15 Feb 2018 22:00:00Reported by hpeType

cve🔗 web.nvd.nist.gov👁 67 Views🌐 WEB

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P0

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the imcsyslogdm service on the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.	1 Mar 201800:00	–	bdu_fstec
CNVD	HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-07184)	18 May 201700:00	–	cnvd
Cvelist	CVE-2017-5815	15 Feb 201822:00	–	cvelist
Exploit DB	HPE Intelligent Management Center (iMC) 7.2 (E0403P10) - Code Execution	2 Jun 201700:00	–	exploitdb
exploitpack	HPE Intelligent Management Center (iMC) 7.2 (E0403P10) - Code Execution	2 Jun 201700:00	–	exploitpack
Tenable Nessus	H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities	19 Jun 201700:00	–	nessus
Tenable Nessus	H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities	19 Jun 201700:00	–	nessus
NVD	CVE-2017-5815	15 Feb 201822:29	–	nvd
OSV	CVE-2017-5815	15 Feb 201822:29	–	osv
Prion	Remote code execution	15 Feb 201822:29	–	prion

NVD

Node

hp intelligent_management_centerRange<7.3

hp intelligent_management_centerMatch7.3

hp intelligent_management_centerMatch7.3e0503p02

hp intelligent_management_centerMatch7.3e0504p02

[
  {
    "product": "Intelligent Management Center (iMC) PLAT",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "PLAT 7.3 E0504P04"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038472
support	www.support.hpe.com/hpsc/doc/public/display

Parameter	Position	Path	Description	CWE
Forwarded From:	binary	imcsyslogdm	Stack-based buffer overflow in imcsyslogdm UDP syslog handling leading to remote code execution.	CWE-20
Quidview	binary	imcsyslogdm	Stack-based buffer overflow in imcsyslogdm UDP syslog handling leading to remote code execution.	CWE-20

17 Jun 2026 01:21Current

7.8High risk

Vulners AI Score7.8

CVSS 39.8

CVSS 210

EPSS0.34245

CWE-20