PT-2013-5211 · Hewlett Packard · Hp Procurve Manager+2

Andrea Micalizzi + 1 · Published 2013-09-11 · Updated 2025-04-22 · CVE-2013-4812

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP ProCurve Manager versions 3.20 through 4.0 HP PCM+ versions 3.20 through 4.0 Identity Driven Manager version 4.0

Description The issue concerns the UpdateCertificatesServlet in the SNAC registration server, which fails to properly validate the fileName argument. This allows remote attackers to upload .jsp files, resulting in the execution of arbitrary code.

Recommendations For HP ProCurve Manager versions 3.20 through 4.0, consider disabling the UpdateCertificatesServlet until a patch is available. For HP PCM+ versions 3.20 through 4.0, restrict access to the UpdateCertificatesServlet to minimize the risk of exploitation. For Identity Driven Manager version 4.0, avoid using the fileName argument in the affected servlet until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-4812

ZDI-13-225

Affected Products

Hp Pcm+

Hp Procurve Manager

Identity Driven Manager

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_pcm_snac_update_certificates.rb · Exploit
• 🔥 https://exploit-db.com/exploits/28337 · Exploit
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4812 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-13-225 · Security Note
• http://secunia.com/advisories/54788 · Note
• https://t.me/cvenotify/119346 · Telegram Post
• http://securitytracker.com/id/1029010 · Note
• http://zerodayinitiative.com/advisories/ZDI-13-225 · Note