Hewlett Packard Enterprise Vulnerabilities and Affected Products
Vulnerabilities associated with Intelligent Management Center (iMC) PLAT.
Products
Clear product- Intelligent Management Center (iMC) PLAT95 vulnerabilities
- Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central16 vulnerabilities
- Matrix Operating Environment15 vulnerabilities
- Aruba ClearPass Policy Manager11 vulnerabilities
- System Management Homepage for Windows and Linux9 vulnerabilities
- HPE 3PAR Service Processors7 vulnerabilities
- HPE AutoPass License Server7 vulnerabilities
- Network Automation6 vulnerabilities
- HPE CentralView Fraud Risk Management5 vulnerabilities
- HPE Intelligent Management Center (IMC)5 vulnerabilities
- Aruba ClearPass4 vulnerabilities
- HP Network Node Manager (NNMi)4 vulnerabilities
- HPE OneView4 vulnerabilities
- SiteScope4 vulnerabilities
- Version Control Repository Manager (VCRM)4 vulnerabilities
- ArubaOS-Switch3 vulnerabilities
- Data Protector3 vulnerabilities
- HP Keyview3 vulnerabilities
- HPE Aruba Networking EdgeConnect SD-WAN Orchestrator3 vulnerabilities
- HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 103 vulnerabilities
- HPE Telco Network Function Virtual Orchestrator3 vulnerabilities
- Insight Remote Support3 vulnerabilities
- Moonshot Provisioning Manager Appliance3 vulnerabilities
- Systems Insight Manager using OpenSSL3 vulnerabilities
- Aruba AirWave2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-12493HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12560MEDIUM | A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found. CWE-22Feb 15, 2018 | CVSS6.5v3.0 | EPSS2.55% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12504HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-5792CRITICAL | HPE iMC 7.3 - RMI Java DeserializationA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. CWE-502Feb 15, 2018 | CVSS9.8v3.0 | EPSS34.3% | PoCs2 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12522HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12488HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12489HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-5819CRITICAL | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. CWE-20Feb 15, 2018 | CVSS9.8v3.0 | EPSS18.2% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12534HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-8963HIGH | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. CWE-502Feb 15, 2018 | CVSS8.8v3.0 | EPSS2.09% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12495HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-5790CRITICAL | A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found. CWE-502Feb 15, 2018 | CVSS9.8v3.0 | EPSS18% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-5818HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. CWE-20Feb 15, 2018 | CVSS7.5v3.0 | EPSS11.8% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12535HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-8980HIGH | A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. CWE-200Feb 15, 2018 | CVSS7.5v3.0 | EPSS5.26% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12541HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12532HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12519HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12502HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-5805CRITICAL | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. CWE-20Feb 15, 2018 | CVSS9.8v3.0 | EPSS22.2% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12515HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-5794HIGH | A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS3.37% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-8982HIGH | HPE iMC 7.3 - Remote Code Execution (Metasploit)A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found. Feb 15, 2018 | CVSS7.5v3.0 | EPSS14.2% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-8956CRITICAL | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. CWE-20Feb 15, 2018 | CVSS9.8v3.0 | EPSS10.2% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12528HIGH | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version. CWE-20Feb 15, 2018 | CVSS8.8v3.0 | EPSS5.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |