Vulnerability Details : CVE-2013-4823
Public exploit exists!
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607.
Products affected by CVE-2013-4823
- cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l01:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h03:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l02:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h04:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:e0101p01:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:hp:imc_branch_intelligent_management_system_software_module:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:imc_branch_intelligent_management_system_software_module:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:imc_branch_intelligent_management_system_software_module:5.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-4823
96.88%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2013-4823
-
HP Intelligent Management BIMS DownloadServlet Directory Traversal
First seen: 2020-04-26auxiliary/scanner/http/hp_imc_bims_downloadservlet_traversalThis module exploits a lack of authentication and a directory traversal in HP Intelligent Management, specifically in the DownloadServlet from the BIMS component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully
CVSS scores for CVE-2013-4823
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2013-4823
-
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943425
HP Support for Technical Help and Troubleshooting | HP® Customer Service.Vendor Advisory
Jump to