PT-2018-8484 · Hewlett Packard · Hpe Intelligent Management Center

Published 2018-07-26 · Updated 2018-10-05 · CVE-2017-8990

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software versions prior to WSM 7.3 (E0506)

Description A remote code execution issue was identified. This issue was resolved in version IMC WSM 7.3 E0506P01 or subsequent versions.

Recommendations For versions prior to WSM 7.3 (E0506), update to IMC WSM 7.3 E0506P01 or a subsequent version to resolve the issue.

Fix

Related Identifiers

CVE-2017-8990

ZDI-18-777

Affected Products

Hpe Intelligent Management Center

References · 5

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03852en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8990 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8990 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-777 · Security Note
• http://securitytracker.com/id/1040988 · Note