Vulnerability Details : CVE-2017-5816
Public exploit exists!
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Vulnerability category: Input validationExecute code
Products affected by CVE-2017-5816
- cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p02:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:7.3:e0503p02:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-5816
90.38%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2017-5816
-
HPE iMC dbman RestartDB Unauthenticated RCE
Disclosure Date: 2017-05-15First seen: 2020-04-26exploit/windows/misc/hp_imc_dbman_restartdb_unauth_rceThis module exploits a remote command execution vulnerablity in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restart a user-specified database instance (OpCode
CVSS scores for CVE-2017-5816
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2017-5816
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-5816
-
http://www.securityfocus.com/bid/100470
Multiple Westermo Routers Multiple Security VulnerabilitiesThird Party Advisory;VDB Entry
-
http://www.securitytracker.com/id/1038478
HPE Intelligent Management Center PLAT Unspecified Flaws Let Remote Users Execute Arbitrary Code on the Target System - SecurityTrackerThird Party Advisory;VDB Entry
-
https://www.exploit-db.com/exploits/43198/
HP iMC Plat 7.2 - Remote Code Execution (2)Exploit;Third Party Advisory;VDB Entry
-
https://www.exploit-db.com/exploits/43493/
HPE iMC - dbman 'RestartDB' Remote Command Execution (Metasploit)Exploit;Third Party Advisory;VDB Entry
-
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us
HPESBHF03745 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code ExecutionVendor Advisory
Jump to