PT-2013-5210 · Hewlett Packard · Hp Procurve Manager+1

Andrea Micalizzi + 1 · Published 2013-09-11 · Updated 2025-04-22 · CVE-2013-4811

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP ProCurve Manager versions 3.20 through 4.0 HP ProCurve Manager+ versions 3.20 through 4.0 Identity Driven Manager version 4.0

Description The issue concerns the UpdateDomainControllerServlet in the SNAC registration server, which fails to properly validate the adCert argument. This allows remote attackers to upload .jsp files, enabling them to execute arbitrary code.

Recommendations For HP ProCurve Manager versions 3.20 through 4.0, consider disabling the UpdateDomainControllerServlet until a patch is available. For HP ProCurve Manager+ versions 3.20 through 4.0, restrict access to the SNAC registration server to minimize the risk of exploitation. For Identity Driven Manager version 4.0, avoid using the adCert argument in the affected servlet until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-4811

ZDI-13-226

Affected Products

Hp Procurve Manager

Identity Driven Manager

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_pcm_snac_update_domain.rb · Exploit
• 🔥 https://exploit-db.com/exploits/28336 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-13-226 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-4811 · Security Note
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409 · Vendor Advisory
• http://secunia.com/advisories/54788 · Note
• https://t.me/cvenotify/119345 · Telegram Post
• http://zerodayinitiative.com/advisories/ZDI-13-226 · Note
• http://securitytracker.com/id/1029010 · Note