Vulnerability Details : CVE-2012-5204
Public exploit exists!
Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1614.
Vulnerability category: Denial of service
Products affected by CVE-2012-5204
- HP » Intelligent Management Center » Update E0202 Enterprise EditionVersions up to, including, (<=) 5.1cpe:2.3:a:hp:intelligent_management_center:*:e0202:enterprise:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:*:e0202:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l01:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h03:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l02:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h04:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:e0101p01:*:*:*:*:*:*
- HP » Intelligent Management Center For Automated Network Manager » Update E0202Versions up to, including, (<=) 5.1cpe:2.3:a:hp:intelligent_management_center_for_automated_network_manager:*:e0202:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-5204
71.57%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2012-5204
-
HP Intelligent Management IctDownloadServlet Directory Traversal
First seen: 2020-04-26auxiliary/scanner/http/hp_imc_ictdownloadservlet_traversalThis module exploits a lack of authentication and a directory traversal in HP Intelligent Management, specifically in the IctDownloadServlet, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Man
CVSS scores for CVE-2012-5204
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2012-5204
-
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276
HP Support for Technical Help and Troubleshooting | HP® Customer Service.Vendor Advisory
-
http://marc.info/?l=bugtraq&m=136268852804156&w=2
'[security bulletin] HPSBGN02854 SSRT100881 rev.1 - HP Intelligent Management Center (iMC), iMC TACAC' - MARCThird Party Advisory
Jump to