APP: HPE Intelligent Management Center dbman Stack Buffer Overflow

A stack-based buffer overflow has been reported in the dbman component of HPE Intelligent Management Center. A remote, unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server. Successful exploitation of this vulnerability could result in execution of arbitrary code on the target server in the context of SYSTEM.

Extended Description

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

Affected Products

Hp intelligent_management_center

Short Name
APP:HPE-INTELLI-MGMT-STACK-BOF
Severity
Critical
Recommended
True
Recommended Action
Drop
Category
APP
Keywords
Buffer CVE-2017-8956 Center HPE Intelligent Management Overflow Stack dbman
Release Date
10/13/2017
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3337
Port
tcp/2810
False Positive
Unknown
Vendors

Hp

CVSS Score

10.0

Found a potential security threat?