CVE-2017-12535: Input Validation
Published Feb 15, 2018
·Updated
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.
Affected Software
1 affected component
HP Intelligent Management Center=7.3-e0504
Event History
Feb 15, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
Which deployments need to be remediated?
HPE Intelligent Management Center PLAT version 7.3 (E0504) is affected. The issue is resolved in PLAT v7.3 (E0506) and subsequent versions.
2
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates network access, low attack complexity, and low privileges are required. No user interaction is required.
3
What could successful exploitation allow?
Successful exploitation can result in remote code execution with high impact to confidentiality, integrity, and availability.