PT-2013-5220 · Hewlett Packard · Hpe Intelligent Management Center+1

Published 2013-10-13 · Updated 2019-10-09 · CVE-2013-4822

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center (iMC) versions (affected versions not specified) HP IMC Branch Intelligent Management System Software Module (aka BIMS) versions (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code. The vulnerability can be exploited via unknown vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2013-4822

ZDI-13-238

Affected Products

Hp Imc Branch Intelligent Management System Software Module

Hpe Intelligent Management Center

References · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_imc_bims_upload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/29130 · Exploit
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943425 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-13-238 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-4822 · Security Note