APP: HPE Intelligent Management Center RMI Registry Insecure Deserialization

An insecure deserialization vulnerability has been reported in HPE Intelligent Management Center. Successful exploitation results in arbitrary code execution under the context of the SYSTEM or root user.

Extended Description

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.

Affected Products

Hp intelligent_management_center

Short Name
APP:HPE-INTEL-MAN-RMI-ID
Severity
Major
Recommended
True
Recommended Action
Drop
Category
APP
Keywords
CVE-2017-5792 Center Deserialization HPE Insecure Intelligent Management RMI Registry
Release Date
06/05/2017
Supported Platforms

srx-branch-19.3

vsrx3bsd-19.2

srx-19.4

vsrx3bsd-19.4

srx-branch-19.4

vsrx-19.4

vsrx-19.2

srx-19.3

srx-branch-12.3

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx-12.3

vmx-19.3

srx-12.3

Sigpack Version
3659
False Positive
Unknown
Vendors

Hp

CVSS Score

7.5

Found a potential security threat?