PT-2018-17916 · Hewlett Packard · Hpe Intelligent Management Center

Publicado 2018-09-07 · Atualizado 2018-12-30 · CVE-2018-7114

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (IMC) versions prior to 7.3 (E0605P06)

Description The issue is related to a remote buffer overflow in the dbman component, which can lead to code execution. This problem has been resolved in version 7.3 (E0605P06) or subsequent versions.

Recommendations For versions prior to 7.3 (E0605P06), update to version 7.3 (E0605P06) or a subsequent version to resolve the issue. As a temporary workaround, consider restricting access to the dbman component until a patch is applied.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-7114

ZDI-18-1001

Produtos afetados

Hpe Intelligent Management Center

Referências · 7

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03906en_us · Aviso do Fabricante
• http://securityfocus.com/bid/106211 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7114 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-1001 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7114 · Aviso do Fabricante
• https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03906en_us · Aviso do Fabricante
• http://securitytracker.com/id/1042182 · Nota