HPESBHF04484 rev.1 - HPE Smart Storage Administrator (SSA) Offline, Local Arbitrary Code Execution

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Smart Storage Administrator -All Offline versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7205 |...

CVE-2016-8523

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

Remote code execution

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

CVE-2016-8523

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

CVE-2016-8523: Improper Neutralization of Special Elements used in a Command

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

PT-2018-5017

Name of the Vulnerable Software and Affected Versions HPE Smart Storage Administrator versions prior to 2.60.18.0 Description A Remote Arbitrary Code Execution issue was discovered. Recommendations For versions prior to 2.60.18.0, update to version 2.60.18.0 or later to resolve the issue...

HPE Smart Storage Administrator Code Execution (CVE-2016-8523)

A remote code execution vulnerability exists in HPE Smart Storage Administrator. A remote attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable server. Successful exploitation could result in arbitrary code execution in the security context of the process...

HPE Smart Storage Administrator Installed

Binary data hpesmartstorageadministratorinstalled.nbin...

HPE Smart Storage Administrator < 2.60.18.0 RCE

The version of HPE Smart Storage Administrator installed on the remote Windows host is prior to 2.60.18.0. It is, therefore, affected by a flaw in function isDirectFileAccess in file ipcelmclient.php due to improper sanitization of user-supplied input to the 'command' variable. An authenticated,...