Multiple HP Products CVE-2013-4822 Remote Code Execution Vulnerability
BID:62895
Info
Multiple HP Products CVE-2013-4822 Remote Code Execution Vulnerability
| Bugtraq ID: | 62895 |
| Class: | Unknown |
| CVE: |
CVE-2013-4822 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 08 2013 12:00AM |
| Updated: | Oct 22 2013 08:26AM |
| Credit: | Andrea Micalizzi aka rgod for working with HP's Zero Day Initiative. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple HP Products CVE-2013-4822 Remote Code Execution Vulnerability
Multiple HP products including HP Intelligent Management Center (iMC), HP IMC Branch Intelligent Management System Software Module (BIMS), and Comware Based Switches and Routers are prone to a remote code-execution vulnerability.
Attackers could exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Note: Comware Based Switches and Routers that use Branch Intelligent Management System Software (BIMS) are vulnerable.
Multiple HP products including HP Intelligent Management Center (iMC), HP IMC Branch Intelligent Management System Software Module (BIMS), and Comware Based Switches and Routers are prone to a remote code-execution vulnerability.
Attackers could exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Note: Comware Based Switches and Routers that use Branch Intelligent Management System Software (BIMS) are vulnerable.
Exploit / POC
Multiple HP Products CVE-2013-4822 Remote Code Execution Vulnerability
The following metasploit exploit code is available:
The following metasploit exploit code is available:
Solution / Fix
Multiple HP Products CVE-2013-4822 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.