Vulnerability Details : CVE-2012-5201
Public exploit exists!
Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611.
Vulnerability category: Execute code
Products affected by CVE-2012-5201
- HP » Intelligent Management Center » Update E0202 Enterprise EditionVersions up to, including, (<=) 5.1cpe:2.3:a:hp:intelligent_management_center:*:e0202:enterprise:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:*:e0202:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l01:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h03:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l02:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h04:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:e0101p01:*:*:*:*:*:*
- HP » Intelligent Management Center For Automated Network Manager » Update E0202Versions up to, including, (<=) 5.1cpe:2.3:a:hp:intelligent_management_center_for_automated_network_manager:*:e0202:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-5201
90.25%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2012-5201
-
HP Intelligent Management Center Arbitrary File Upload
Disclosure Date: 2013-03-07First seen: 2020-04-26exploit/windows/http/hp_imc_mibfileuploadThis module exploits a code execution flaw in HP Intelligent Management Center. The vulnerability exists in the mibFileUpload which is accepting unauthenticated file uploads and handling zip contents in an insecure way. Combining both weaknesses a remote attacker c
CVSS scores for CVE-2012-5201
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2012-5201
-
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276
HP Support for Technical Help and Troubleshooting | HP® Customer Service.Vendor Advisory
-
http://marc.info/?l=bugtraq&m=136268852804156&w=2
'[security bulletin] HPSBGN02854 SSRT100881 rev.1 - HP Intelligent Management Center (iMC), iMC TACAC' - MARCThird Party Advisory
Jump to