CVE-2020-7182: Critical severity hp intelligent management center vulnerability
Published Oct 19, 2020
·Updated
A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Affected Software
29 affected components
HP Intelligent Management Center<7.3
HP Intelligent Management Center=7.3
HP Intelligent Management Center=7.3-e0501
HP Intelligent Management Center=7.3-e0503
HP Intelligent Management Center=7.3-e0503p02
HP Intelligent Management Center=7.3-e0504
HP Intelligent Management Center=7.3-e0504p02
HP Intelligent Management Center=7.3-e0504p04
HP Intelligent Management Center=7.3-e0504p2
HP Intelligent Management Center=7.3-e0504p4
HP Intelligent Management Center=7.3-e0506
HP Intelligent Management Center=7.3-e0506p02
HP Intelligent Management Center=7.3-e0506p03
HP Intelligent Management Center=7.3-e0506p07
HP Intelligent Management Center=7.3-e0506p09
HP Intelligent Management Center=7.3-e0605
HP Intelligent Management Center=7.3-e0605h02
HP Intelligent Management Center=7.3-e0605h05
HP Intelligent Management Center=7.3-e0605h07
HP Intelligent Management Center=7.3-e0605h08
HP Intelligent Management Center=7.3-e0605h09
HP Intelligent Management Center=7.3-e0605p04
HP Intelligent Management Center=7.3-e0605p06
HP Intelligent Management Center=7.3-e0701
HP Intelligent Management Center=7.3-e0702
HP Intelligent Management Center=7.3-e0703
HP Intelligent Management Center=7.3-e0703h01
HP Intelligent Management Center=7.3-e0705
HP Intelligent Management Center=7.3-e0705p02
Event History
Oct 19, 2020
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-7182?
The severity of CVE-2020-7182 is critical with a CVSS score of 8.8.
2
How can I fix the sshconfig expression language injection remote code execution vulnerability in HPE Intelligent Management Center?
To fix the sshconfig expression language injection vulnerability, users should update to iMC PLAT 7.3 (E0705P07) or a higher version.