HPE Intelligent Management Center imcwlandm SSID Stack Buffer Overflow (CVE-2017-5806)

A stack buffer overflow exists in HPE Intelligent Management Center. The vulnerability is due to improper validation of the size field when parsing an SSID attribute. A remote, unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server...

PT-2017-3555

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description: The issue exists due to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This allows a remote attacker to execu...

File Uploading Vulnerability in Nanjing Sage's Intelligent Management System for Experimental Teaching and Learning

Nanjing apex experimental teaching intelligent management system is designed for colleges and universities to establish a set of experimental teaching management mode of the system. There is a file upload vulnerability in Nanjing Centaur Experimental Teaching Intelligent Management System. An...

HPE Intelligent Management Center dbman BackupZipFile Command Injection (CVE-2017-5820)

A command injection vulnerability exist in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling BackupZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

PT-2017-3554

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.2 Description: The issue exists due to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This allows a remote attacker to execute...

PT-2017-3556

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.2 Description: The issue exists due to insufficient validation of a user-supplied string before it is used to execute a system call. This can allow a remote attacker to execute arbitrary...

HPESBHF03764 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8954 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 10....

HPE Intelligent Management Center dbman RestoreZipFile Command Injection (CVE-2017-5821)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling RestoreZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

PT-2017-3522

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version Plat 7.3 E0504P4 and earlier Description: A remote code execution issue was discovered, related to the use of an uninitialized pointer in the dbman service of HPE Intelligent Management Center...

HPE Intelligent Management Center dbman FileTrans Arbitrary File Write (CVE-2017-5822)

An arbitrary file write vulnerability has been reported in the dbman component of HPE Intelligent Management Center. The vulnerability is due to lack of authentication on FileTrans commands, used to transfer files to the host running dbman. A remote, unauthenticated attacker can exploit the...

H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities

The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0504P04. It is, therefore, affected by multiple vulnerabilities : - A NULL pointer deference flaw exists, specifically in the asn1itemembedd2i function within file crypto/asn1/tasndec.c, when...

HPE Intelligent Management Center dbman Opcode 10008 Command Injection

Binary data hpimcdbmancve-2017-5816.nbin...

HPE Intelligent Management Center UrlAccessController Authentication Bypass (CVE-2017-5791)

An authentication bypass vulnerability has been reported in HPE Intelligent Management Center. The vulnerability is due to errors in handling specific strings contained in the request URI. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target...

HPESBHF03756 rev.1 - HPE Network Products including Comware 7, iMC, and VCX running OpenSSL, Remote Denial of Service (DoS), Disclosure of Sensitive Information

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VCX Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v7 CW7 Products All versions -...

HPE Intelligent Management Center (iMC) 7.2 (E0403P10) - Code Execution

Vulnerability Summary The following advisory describes a Stack Buffer Overflow vulnerability found in HPE Intelligent Management Center version v7.2 E0403P10 Enterprise, this vulnerability leads to an exploitable remote code execution. HPE Intelligent Management Center iMC delivers comprehensive...

PT-2017-3526

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT versions 7.3 E0504P2 and earlier Description: A remote code execution issue was discovered, related to insufficient input validation in the mibFileServlet component. This allows a remote attacker to rena...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 22, 2017

For those of you who follow the National Football League NFL, do you remember Super Bowl 47? I wasn’t exactly thrilled about the teams that played since I’m not a 49ers or Ravens fan. What was interesting about the game is that it was halted for over half an hour in the third quarter because of a...

HP Intelligent Management Center PLAT Multiple Remote Code Execution Vulnerabilities (CNVD-2017-10559)

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. Multiple unspecified remote code execution...

HP Intelligent Management Center PLAT Multiple Remote Code Execution Vulnerabilities

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. Multiple unspecified remote code execution...

HP Intelligent Management Center PLAT Multiple Remote Code Execution Vulnerabilities (CNVD-2017-10558)

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. Multiple unspecified remote code execution...