CVE-2016-8523

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

Remote code execution

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

CVE-2016-8523

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

HPE Smart Storage Administrator Code Execution (CVE-2016-8523)

A remote code execution vulnerability exists in HPE Smart Storage Administrator. A remote attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable server. Successful exploitation could result in arbitrary code execution in the security context of the process...

HPE Smart Storage Administrator Installed

Binary data hpesmartstorageadministratorinstalled.nbin...

HPE Smart Storage Administrator < 2.60.18.0 RCE

The version of HPE Smart Storage Administrator installed on the remote Windows host is prior to 2.60.18.0. It is, therefore, affected by a flaw in function isDirectFileAccess in file ipcelmclient.php due to improper sanitization of user-supplied input to the 'command' variable. An authenticated,...