CVE-2017-5817

🗓️ 15 Feb 2018 22:00:00Reported by hpeType

cve🔗 web.nvd.nist.gov👁 99 Views🌐 WEB

Remote Code Execution vuln in HPE iMC PLAT 7.3 E0504P04

Reporter	Title	Published	Views	Family All 19
zdt	HP iMC Plat 7.2 - Remote Code Execution Exploit	2 Dec 201700:00	–	zdt
zdt	HPE iMC dbman RestoreDBase Unauthenticated Remote Command Execution Exploit	10 Jan 201800:00	–	zdt
BDU FSTEC	The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.	1 Mar 201800:00	–	bdu_fstec
Circl	CVE-2017-5817	28 Nov 201700:00	–	circl
CNVD	HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-07185)	18 May 201700:00	–	cnvd
Check Point Advisories	HPE Intelligent Management Center dbman RestoreDBase Command Injection (CVE-2017-5817; CVE-2017-5819)	15 Aug 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-5817	15 Feb 201822:00	–	cvelist
Exploit DB	HP iMC Plat 7.2 - Remote Code Execution	28 Nov 201700:00	–	exploitdb
Exploit DB	HPE iMC - dbman 'RestoreDBase' Remote Command Execution (Metasploit)	10 Jan 201800:00	–	exploitdb
exploitpack	HP iMC Plat 7.2 - Remote Code Execution	28 Nov 201700:00	–	exploitpack

NVD

Vulners

Node

hp intelligent_management_centerRange<7.3

hp intelligent_management_centerMatch7.3

hp intelligent_management_centerMatch7.3e0503p02

hp intelligent_management_centerMatch7.3e0504p02

[
  {
    "product": "Intelligent Management Center (iMC) PLAT",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "PLAT 7.3 E0504P04"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/43492/
securitytracker	www.securitytracker.com/id/1038478
support	www.support.hpe.com/hpsc/doc/public/display
exploit-db	www.exploit-db.com/exploits/43195/

Parameter	Position	Path	Description	CWE
database_user	binary	dbman_restoredbase	Unauthenticated remote command execution via RestoreDBase op 10007 in HPE iMC dbman service (TCP 2810)	CWE-20
database_password	binary	dbman_restoredbase	Unauthenticated remote command execution via RestoreDBase op 10007 in HPE iMC dbman service (TCP 2810)	CWE-20
database_ip	binary	dbman_restoredbase	Unauthenticated remote command execution via RestoreDBase op 10007 in HPE iMC dbman service (TCP 2810)	CWE-20
database_port	binary	dbman_restoredbase	Unauthenticated remote command execution via RestoreDBase op 10007 in HPE iMC dbman service (TCP 2810)	CWE-20
database_instance	binary	dbman_restoredbase	Unauthenticated remote command execution via RestoreDBase op 10007 in HPE iMC dbman service (TCP 2810)	CWE-20
restore_type	binary	dbman_restoredbase	Unauthenticated remote command execution via RestoreDBase op 10007 in HPE iMC dbman service (TCP 2810)	CWE-20

17 Jun 2026 01:21Current

7.6High risk

Vulners AI Score7.6

CVSS 39.8

CVSS 210

EPSS0.82593

CWE-20