PT-2020-15790 · Hewlett Packard · Hpe Intelligent Management Center

Published 2020-10-19 · Updated 2020-10-21 · CVE-2020-24649

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (iMC) versions prior to 7.3 (E0705P07)

Description A remote code execution vulnerability due to input validation issues in the bytemessageresource transformentity was discovered. This issue affects the HPE Intelligent Management Center.

Recommendations For versions prior to 7.3 (E0705P07), update to version 7.3 (E0705P07) or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-24649

Affected Products

Hpe Intelligent Management Center

References · 4

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24649 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24649 · Vendor Advisory
• https://t.me/cibsecurity/15387 · Telegram Post