PT-2013-5220

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions affected versions not specified HP IMC Branch Intelligent Management System Software Module aka BIMS versions affected versions not specified Description The issue allows remote attackers to execut...

CVE-2013-4827: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664...

CVE-2013-4826: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

CVE-2013-4822: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606...

PT-2013-5223

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions. It i...

CVE-2013-4823: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607...

PT-2013-5222

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass authentication. The estimated numb...

CVE-2013-4825: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645...

HP Intelligent Management Center multiple security vulnerabilities

Code execution, authentication bypass, SQL injection, unauthorized access...

[security bulletin] HPSBGN02930 rev.1 - HP Intelligent Management Center(iMC) and HP IMC Service Operation Management Software Module, Remote Authentication Bypass, Disclosure of Information, Unauthorized Access, SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03943547 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03943547 Version: 1 HPSBGN02930 rev....

[security bulletin] HPSBGN02929 rev.1 - HP Intelligent Management Center (iMC), HP IMC Branch Intelligent Management System Software Module (BIMS), and Comware Based Switches and Routers, Remote Code Execution, Disclosure of Informati

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03943425 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03943425 Version: 1 HPSBGN02929 rev....

HP Intelligent Management Center BIMS UploadServlet Directory Traversal

This module exploits a directory traversal vulnerability on the version 5.2 of the BIMS component from the HP Intelligent Management Center. The vulnerability exists in the UploadServlet, allowing the user to download and upload arbitrary files. This module has been tested successfully on HP...

HP Intelligent Management SOM Account Creation

This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the AccountService RpcServiceServlet from the SOM component, in order to create a SOM account with Account Management permissions. This module has been tested successfully on HP...

HP Intelligent Management Center mibFileUpload Servlet Arbitrary File Upload (CVE-2012-5201)

An arbitrary file upload vulnerability exists in HP Intelligent Management Center...

HP Intelligent Management Center FaultDownloadServlet Information Disclosure (CVE-2012-5202)

An information disclosure vulnerability has been reported in HP Intelligent Management Center...

HP Intelligent Management Center IctDownloadServlet Information Disclosure (CVE-2012-5204)

An information disclosure vulnerability exists in HP Intelligent Management Center...

Design/Logic Flaw

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

Stack overflow

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

CVE-2012-6571

The CVE-2012-6571 issue affects Huawei devices (AR routers and S-series switches: S2000, S3000, S3500, S3900, S5100, S5600, S7800). The HTTP module in the BIMS/web management components uses predictable Session ID values, enabling remote attackers to hijack sessions via brute-force. This is docum...

PT-2013-2023

Name of the Vulnerable Software and Affected Versions Huawei Branch Intelligent Management System BIMS affected versions not specified Huawei AR routers affected versions not specified Huawei S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches affected versions not specified...