PT-2018-8275 · Hewlett Packard · Hpe Opencall Media Platform

Paolo Stagno · Published 2018-02-15 · Updated 2018-03-15 · CVE-2017-5798

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: HPE OpenCall Media Platform (OCMP) versions prior to 3.4.2 RP201 HPE OpenCall Media Platform (OCMP) versions prior to 4.4.7 RP702

Description: A Remote Code Execution issue was found in HPE OpenCall Media Platform (OCMP).

Recommendations: For versions prior to 3.4.2 RP201, update to version 3.4.2 RP201 or later. For versions prior to 4.4.7 RP702, update to version 4.4.7 RP702 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-5798

Affected Products

Hpe Opencall Media Platform

References · 5

• 🔥 https://exploit-db.com/exploits/41927 · Exploit
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5798 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5798 · Vendor Advisory
• http://securityfocus.com/bid/98013 · Note