CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...

CVE-2017-8981

HPE iMC PLAT 7.3 E0506 contains a Remote Code Execution vulnerability in the dbman.exe component. The issue is a stack-based buffer overflow caused by improper validation of user-supplied data length, allowing an unauthenticated remote attacker to execute arbitrary code on affected installations ...

CVE-2017-5822

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-12519

CVE-2017-12519 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected component is the iMC PLAT stack; root cause details are not fully disclosed in the pro...

CVE-2017-12503

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12499

HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) contains CVE-2017-12499, a Remote Code Execution vulnerability. The issue is resolved in PLAT v7.3 (E0506) or any later version. Related documents corroborate iMC-related RCE vulnerabilities in the same family, though details vary per sourc...

CVE-2017-12554

The CVE-2017-12554 entry concerns Hewlett Packard Enterprise Intelligent Management Center (iMC) Platform (iMC Plat) versions up to 7.3 E0504P2 and earlier. The root cause is a path validation flaw in the mibFileServlet, which handles HTTP(S) ports 8080 and 8443. This lack of proper validation al...

CVE-2017-8955

CVE-2017-8955 concerns HPE Intelligent Management Center (iMC) PLAT 7.2 with a reported Remote Code Execution vulnerability (per NVD and CVE listings). Connected sources also describe a separate dbman service flaw on iMC that could allow remote/file deletion abuse (ZDI-17-482), indicating multipl...

CVE-2017-5805

CVE-2017-5805 concerns HPE Intelligent Management Center (iMC) PLAT 7.2. The vulnerability is a remote code execution flaw in the iMC Server service: a stack-based buffer overflow when processing the UserName field over UDP port 6666, allowing unauthenticated remote attackers to run arbitrary cod...

CVE-2017-5817

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-8984

CVE-2017-8984 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P03. Multiple sources (NVD, CVE lists, CNVD) describe a remote code execution vulnerability in iMC PLAT, enabling an attacker to run commands with SYSTEM/root privileges and potentially write or delete arbitrary files. CV...

CVE-2017-12537

CVE-2017-12537 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later version. Connected sources corroborate an RCE impacting iMC PLAT and indicate multiple...

CVE-2017-12488

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12490

CVE-2017-12490 is a remote code execution vulnerability in Hewlett Packard Enterprise’s HPE iMC PLAT 7.3 (E0504). The issue is described as an Expression Language injection in perfSelInsServer.gwtsvc (getSelInsBean) that could enable an attacker to execute arbitrary code. Exploitation is remote; ...

CVE-2017-8956

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-12498

CVE-2017-12498 is a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT. The issue affects iMC PLAT version 7.3 (E0504) and is fixed in PLAT v7.3 (E0506) or later. The public description identifies a vulnerability in the HPE iMC PLAT li...

CVE-2017-12516

CVE-2017-12516 is a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504), allowing code execution via specific iMC components. The issue is documented as being fixed in PLAT v7.3 (E0506) or later. Connected advisories (ZDI-17-671) describe an authenticat...

CVE-2017-8966

CVE-2017-8966 is a deserialization of untrusted data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 E0504P2. Several connected sources tie this to the TopoMsgServlet component, where improper validation of deserialized input can enable arbitrary code exec...

CVE-2017-5822

CVE-2017-5822 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P04. The vulnerability resides in the dbman service, where handling of opcode 10010 requests can lead to arbitrary file writes and remote code execution with SYSTEM privileges. Multiple connected advisories describe unau...

CVE-2017-12512

CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...