PT-2011-3410 · Hewlett Packard · Hpe Intelligent Management Center

Luigi Auriemma

·

CVE-2011-1849

·

Published

2011-05-10

·

Updated

2019-10-09

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center (IMC) versions 5.0 before E0101L02
Description The issue allows remote attackers to create or overwrite files and subsequently execute arbitrary code via a crafted WRQ request to the tftpserver.exe in HP Intelligent Management Center (IMC).
Recommendations For HP Intelligent Management Center (IMC) versions 5.0 before E0101L02, update to version E0101L02 or later to resolve the issue.

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1849
ZDI-11-161

Affected Products

Hpe Intelligent Management Center