Lucene search

HpeCVE-2017-5795

HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-5795

2018-02-1522:29:05

CWE-200

hpe

web.nvd.nist.gov

cve-2017-5795

local arbitrary file download

hpe

intelligent management center

imc

nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) version PLAT 7.2 E0403P06 was found.

Affected configurations

Nvd

Node

hpintelligent_management_centerMatch7.2e0403p06

VendorProductVersionCPE
hpintelligent_management_center7.2cpe:2.3:a:hp:intelligent_management_center:7.2:e0403p06:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	intelligent_management_center	7.2	cpe:2.3:a:hp:intelligent_management_center:7.2:e0403p06::::::

CNA Affected

[
  {
    "product": "Intelligent Management Center (IMC) PLAT",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "PLAT 7.2 E0403P06"
      }
    ]
  }
]

References

www.securityfocus.com/bid/96773

support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03714en_us

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

Related for CVE-2017-5795