HP Intelligent Management Center PLAT CVE-2017-8984 Multiple Security Vulnerabilities

Bugtraq ID:	102922
Class:	Unknown
CVE:	CVE-2017-8984
Remote:	Yes
Local:	No
Published:	Jan 24 2018 12:00AM
Updated:	Jan 24 2018 12:00AM
Credit:	Ron Waisberg of TELUS Security Labs.
Vulnerable:	HP Intelligent Management Center (IMC) 7.3 E0506P03
Not Vulnerable:	HP Intelligent Management Center (IMC) 7.3 E0506P07

HP Intelligent Management Center PLAT CVE-2017-8984 Multiple Security Vulnerabilities

HP Intelligent Management Center PLAT is prone to the following security vulnerabilities:

1. An unspecified remote command-execution vulnerability
2. An unspecified arbitrary file-write vulnerability
3. An unspecified arbitrary-file-deletion vulnerability

An attacker can exploit these issues to execute arbitrary command, to write arbitrary files, to delete arbitrary files as root on the system. Failed exploit attempts will likely result in denial-of-service conditions.

HP Intelligent Management Center versions 7.3 E0506P03 and prior are vulnerable.

HP Intelligent Management Center PLAT CVE-2017-8984 Multiple Security Vulnerabilities

References:

• HP Home page (hp)
  
• HPESBHF03811 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Multip (HP)