PT-2025-13633 · Hewlett Packard · Hpe Insight Cluster Management Utility

Published 2025-03-30 · Updated 2025-04-09 · CVE-2024-13804

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Insight Cluster Management Utility (CMU) version 8.2

Description The issue affects HPE Insight Cluster Management Utility (CMU) and allows for unauthenticated remote code execution (RCE). This enables attackers to execute commands with root privileges. Immediate mitigation is recommended.

Recommendations For HPE Insight Cluster Management Utility (CMU) version 8.2, consider disabling the vulnerable component until a patch is available. Restrict access to the utility to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2024-13804

Affected Products

Hpe Insight Cluster Management Utility

References · 11

• 🔥 https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-13804 · Security Note
• https://twitter.com/dailytechonx/status/1906772229976703313 · Twitter Post
• https://t.me/cvenotify/117130 · Telegram Post
• https://twitter.com/cracbot/status/1908112409778098342 · Twitter Post
• https://t.me/cvedetector/21524 · Telegram Post
• https://t.me/cvenotify/116940 · Telegram Post
• https://twitter.com/CVEnew/status/1906458567898439968 · Twitter Post
• https://t.me/cvetracker/20281 · Telegram Post
• https://twitter.com/0xbad53c/status/1909905377426325504 · Twitter Post
• https://twitter.com/cracbot/status/1907750016950874191 · Twitter Post