PT-2020-9234 · Hewlett Packard · Hpe Mse Msg Gw

Published 2020-07-17 · Updated 2021-07-21 · CVE-2019-12000

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE MSE Msg Gw application E-LTU versions prior to 3.2

Description A potential Remote Access Restriction Bypass issue has been found in the HPE MSE Msg Gw application E-LTU when HTTPS is used between the USSD and an external USSD service logic application.

Recommendations Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2019-12000

Affected Products

Hpe Mse Msg Gw

References · 4

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03979en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12000 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12000 · Security Note
• https://t.me/cibsecurity/13536 · Telegram Post