PT-2017-3533

CVE-2017-8965

·

Published

2017-05-11

·

Updated

2018-02-24

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2
Description: A Deserialization of Untrusted Data issue was discovered, which is related to the AccessMgrServlet component. This issue can be exploited by a remote attacker to execute arbitrary code in the context of SYSTEM, potentially allowing for remote code execution. The vulnerability is associated with the restoration of untrusted data structures in memory.
Recommendations: For version 7.3 E0504P2, consider disabling the AccessMgrServlet component as a temporary workaround until a patch is available. Restrict access to the vulnerable component to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾