Lucene search

K
cve[email protected]CVE-2020-24646
HistoryOct 19, 2020 - 6:15 p.m.

CVE-2020-24646

2020-10-1918:15:13
CWE-787
web.nvd.nist.gov
30
cve-2020-24646
tftpserver
buffer overflow
remote code execution
hpe
imc
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.8%

A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Affected configurations

NVD
Node
hpintelligent_management_centerRange<7.3
OR
hpintelligent_management_centerMatch7.3-
OR
hpintelligent_management_centerMatch7.3e0501
OR
hpintelligent_management_centerMatch7.3e0503
OR
hpintelligent_management_centerMatch7.3e0503p02
OR
hpintelligent_management_centerMatch7.3e0504
OR
hpintelligent_management_centerMatch7.3e0504p02
OR
hpintelligent_management_centerMatch7.3e0504p04
OR
hpintelligent_management_centerMatch7.3e0504p2
OR
hpintelligent_management_centerMatch7.3e0504p4
OR
hpintelligent_management_centerMatch7.3e0506
OR
hpintelligent_management_centerMatch7.3e0506p02
OR
hpintelligent_management_centerMatch7.3e0506p03
OR
hpintelligent_management_centerMatch7.3e0506p07
OR
hpintelligent_management_centerMatch7.3e0506p09
OR
hpintelligent_management_centerMatch7.3e0605
OR
hpintelligent_management_centerMatch7.3e0605h02
OR
hpintelligent_management_centerMatch7.3e0605h05
OR
hpintelligent_management_centerMatch7.3e0605p04
OR
hpintelligent_management_centerMatch7.3e0605p06
OR
hpintelligent_management_centerMatch7.3e0705
OR
hpintelligent_management_centerMatch7.3e0705p02
OR
hpintelligent_management_centerMatch7.3e0705p04
OR
hpintelligent_management_centerMatch7.3e0705p06

CNA Affected

[
  {
    "product": "HPE Intelligent Management Center (iMC)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to iMC PLAT 7.3 (E0705P07)"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.8%

Related for CVE-2020-24646