TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 22, 2017

For those of you who follow the National Football League NFL, do you remember Super Bowl 47? I wasn’t exactly thrilled about the teams that played since I’m not a 49ers or Ravens fan. What was interesting about the game is that it was halted for over half an hour in the third quarter because of a...

HP Intelligent Management Center PLAT Multiple Remote Code Execution Vulnerabilities (CNVD-2017-10558)

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. Multiple unspecified remote code execution...

HP Intelligent Management Center PLAT Multiple Remote Code Execution Vulnerabilities

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. Multiple unspecified remote code execution...

HP Intelligent Management Center PLAT Multiple Remote Code Execution Vulnerabilities (CNVD-2017-10560)

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. Multiple unspecified remote code execution...

HP Intelligent Management Center PLAT Multiple Remote Code Execution Vulnerabilities (CNVD-2017-10559)

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. Multiple unspecified remote code execution...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-07186)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-07183)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

Input validation vulnerability in multiple Huawei products

Huawei DP300 and so on are products of Huawei, China. DP300 is a video conferencing terminal. eSpace 7950 is an intelligent IP video phone product of Huawei, China. An input validation vulnerability exists in multiple Huawei products, which stems from a lack of input validation in the program. A...

HPE iMC dbman RestoreDBase Unauthenticated RCE

This module exploits a remote command execution vulnerablity in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restore a user-specified database OpCode 10007, however the database connection username i...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10008 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10006 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10013 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10010 Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Arbitrary File Deletion Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

HPE Intelligent Management Center RMI Registry Insecure Deserialization (CVE-2017-5792)

An insecure deserialization vulnerability has been reported in HPE Intelligent Management Center. The vulnerability is due to deserialization of untrusted data by RMI Registry while having vulnerable classes in the code path. A remote, unauthenticated attacker can exploit this vulnerability by...

HPE iMC dbman RestartDB Unauthenticated RCE

This module exploits a remote command execution vulnerablity in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restart a user-specified database instance OpCode 10008, however the instance ID is not...

HPE Intelligent Management Center CommonUtils ZIP Directory Traversal (CVE-2017-5793)

A directory traversal vulnerability exist in HPE Intelligent Management Center. The vulnerability is due to a lack of proper input sanitization on uploaded ZIP files handled by the CommonUtils class. A remote attacker can exploit this vulnerability by sending an HTTP request containing a...