CVE-2017-8954

CVE-2017-8954 : A remote code execution vulnerability affects HPE Intelligent Management Center (iMC) PLAT 7.2. The issue targets the dbman service (default port 2810) where insufficient input validation allows an attacker to execute arbitrary code with SYSTEM privileges. Documented as a remote, ...

CVE-2017-8962

CVE-2017-8962 corresponds to a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory identifies exploitation as a remote code execution flaw in the perfAccessMgrServlet, where insufficient inp...

CVE-2017-8957

An RCE vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.2. The flaw exists in the dbman service, which by default listens on TCP port 2810. It results from improper validation of a user-supplied string before it is used to execute a system call, enabling an u...

CVE-2017-8955

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8965

CVE-2017-8965 is a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. The issue arises from deserialization in the AccessMgrServlet, enabling remote code execution as described by the ZDI advisory (ZDI-17-851...

CVE-2017-8983

CVE-2017-8983 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P4. Affected component is the redirectviewer servlet, where a user-submitted path is not properly validated before file operations, enabling remote code execution. Some sources note authentication i...

CVE-2017-8982

HPE iMC PLAT 7.3 (E0504P4) contains a Remote Authentication Restriction Bypass vulnerability (CVE-2017-8982). The issue is tied to UrlAccessController in the iMC PLAT, with unauthenticated access potentially enabling privilege escalation. Multiple public advisories document an unauthenticated EL ...

CVE-2017-8964

CVE-2017-8964 concerns a Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2. The issue is tied to TopoBroadcastServlet, enabling remote code execution through deserialization of untrusted data. The ZDI advisor...

CVE-2017-5790

CVE-2017-5790 is a remote deserialization vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06 . The flaw exists in the accessMgrServlet and allows unauthenticated remote code execution by deserializing untrusted data. Multiple sources (ZDI-17-166, CNVD-2017-02625, NVD entry...

CVE-2016-8525

CVE-2016-8525 is a Remote Disclosure of Information vulnerability in Hewlett Packard Enterprise (HPE) iMC PLAT. Affected: iMC PLAT versions v7.2 E0403P06 and earlier. Impact: confidentiality partial (per CVSS v2) and high (per CVSS v3); no integrity or availability impact stated. Root cause detai...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03952)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

HPE iMC - dbman 'RestoreDBase' Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE iMC dbman RestoreDBase Unauthenticated RCE', 'Description' = %q This module exploits a remote command execution vulnerablity in Hewlett Packa...

HPE iMC dbman RestoreDBase Unauthenticated Remote Command Execution Exploit

This Metasploit module exploits a remote command execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restore a user-specified database OpCode 10007, however the database connectio...

HP iMC Plat 7.2 Remote Code Execution

!/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution Exploit (2)

Exploit for windows platform in category remote exploits !/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution Exploit

Exploit for windows platform in category remote exploits !/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10007 Command Injection RCE Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution (2)

HP iMC Plat 7.2 - Remote Code Execution 2 !/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution (2)

!/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution

!/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10007 Command Injection RCE Date: 11-28-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

CVE-2017-5791

CVE-2017-5791 affects Hewlett Packard Enterprise Intelligent Management Center (IMC/iMC) PLAT 7.2 E0403P06. The vulnerability resides in the UrlAccessController.doFilter method, where crafted URIs containing specific strings can bypass authentication remotely. Impact described in connected source...