HPE Intelligent Management Center PLAT Stack Buffer Overflow (CVE-2018-7074)

A stack buffer overflow vulnerability has been reported in HPE Intelligent Management Center PLAT. The vulnerability is due to an overly large block size parameter provided in the TFTP packet data. Successful exploitation could results in arbitrary code execution under the context of the SYSTEM. ...

CVE-2018-7074

HPE Intelligent Management Center PLAT 7.3 E0506P07 contains a stack-based buffer overflow in the tftpserver handling of the m_pkg_LimitSize parameter, allowing remote code execution with SYSTEM privileges. The issue can be exploited without authentication; successful exploitation could run arbit...