Lucene search

HpeCVE-2017-5820

HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-5820

2018-02-1522:29:07

hpe

web.nvd.nist.gov

cve-2017-5820

remote code execution

hpe intelligent management center

imc plat

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.778

Percentile

98.3%

JSON

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

Affected configurations

Nvd

Node

hpintelligent_management_centerRange<7.3

hpintelligent_management_centerMatch7.3

hpintelligent_management_centerMatch7.3e0503p02

hpintelligent_management_centerMatch7.3e0504p02

VendorProductVersionCPE
hpintelligent_management_center*cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	intelligent_management_center	*	cpe:2.3:a:hp:intelligent_management_center::::::::
hp	intelligent_management_center	7.3	cpe:2.3:a:hp:intelligent_management_center:7.3:::::::*
hp	intelligent_management_center	7.3	cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02::::::
hp	intelligent_management_center	7.3	cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02::::::

CNA Affected

[
  {
    "product": "Intelligent Management Center (iMC) PLAT",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "PLAT 7.3 E0504P04"
      }
    ]
  }
]

References

www.securitytracker.com/id/1038560

support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.778

Percentile

98.3%

JSON

Related for CVE-2017-5820