PT-2018-8276 · Hewlett Packard · Hpe Opencall Media Platform

Paolo Stagno · Published 2018-02-15 · Updated 2018-03-15 · CVE-2017-5799

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HPE OpenCall Media Platform (OCMP) versions prior to 3.4.2 RP201 HPE OpenCall Media Platform (OCMP) versions prior to 4.4.7 RP702

Description: A Remote Code Execution issue was discovered in HPE OpenCall Media Platform (OCMP).

Recommendations: For versions prior to 3.4.2 RP201, update to version 3.4.2 RP201 or later. For versions prior to 4.4.7 RP702, update to version 4.4.7 RP702 or later.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-5799

Affected Products

Hpe Opencall Media Platform

References · 5

• 🔥 https://exploit-db.com/exploits/41927 · Exploit
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5799 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5799 · Vendor Advisory
• http://securityfocus.com/bid/98013 · Note