CVE-2017-5806

CVE-2017-5806 affects HPE Intelligent Management Center (iMC) PLAT 7.2. A stack/SSID parsing path in the iMC Server service (listening on UDP 6666 by default) allows a remote, unauthenticated attacker to cause a buffer overflow and execute arbitrary code with SYSTEM privileges. Multiple connected...

CVE-2017-5806

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5804

CVE-2017-5804 is a remote code execution vulnerability affecting Hewlett Packard Enterprise's Intelligent Management Center (IMC/iMC) Platform version 7.2. The connected sources consistently describe an RCE in IMC/iMC, with varying technical attributions: PRION cites an imcwlandm stack buffer ove...

CVE-2017-5818

CVE-2017-5818 affects HPE iMC PLAT (H3C-branded) v7.3 E0504P04. The flaw is in the dbman service handling opcode 10007, allowing an unauthenticated remote attacker to delete arbitrary files with SYSTEM privileges (arbitrary file deletion). Affected product is described in the connected documents;...

CVE-2017-5822

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...

CVE-2017-12519

CVE-2017-12519 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected component is the iMC PLAT stack; root cause details are not fully disclosed in the pro...

CVE-2017-12535

HP iMC PLAT (HPE Intelligent Management Center) is affected by CVE-2017-12535 via a Remote Code Execution vulnerability in the ictExpertCSVDownload feature. The root cause is an Expression Language Injection in the ictExpertCSVDownload.xhtml handling of the beanName parameter within the SyslogIct...

CVE-2017-12512

CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...

CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

CVE-2017-8956

Summary: CVE-2017-8956 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT, affecting versions prior to 7.3 E0504P04. The issue arises in the dbman service due to improper validation of user-supplied input, leading to a stack-based buffer overflow that enables...

CVE-2017-12560

CVE-2017-12560 corresponds to a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, specifically in the mibFileServlet . The root cause is inadequate validation of a user-supplied path used in file operations, enabling a remote attacker to delete arbitrary direct...

CVE-2017-5822

CVE-2017-5822 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P04. The vulnerability resides in the dbman service, where handling of opcode 10010 requests can lead to arbitrary file writes and remote code execution with SYSTEM privileges. Multiple connected advisories describe unau...

CVE-2017-12523

CVE-2017-12523 is a Remote Code Execution in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is resolved in PLAT 7.3 (E0506) or later. Per NVD data, exploitation is possible remotely over the network with no user interaction; impact is high (confidentiality, integrity, availab...

CVE-2017-12532

HPE Intelligent Management Center PLAT 7.3 (E0504) contains a remote code execution vulnerability due to Expression Language injection in faultInfo_content.jsf (beanName handling). This allows an attacker to execute arbitrary code on the target, with network access and low privileges. The issue i...

CVE-2017-12517

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12538

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-5816

CVE-2017-5816: A Remote Code Execution via HPE iMC PLAT 7.3 E0504P04 dbman RestartDB (opcode 10008) allows unauthenticated remote command execution due to improper validation of RestartDB input. The vulnerability affects the dbman component of HP iMC and can execute OS commands as SYSTEM over TCP...