Hewlett Packard Enterprise Vulnerabilities and Affected Products
Vulnerabilities associated with System Management Homepage for Windows and Linux.
Products
Clear product- Intelligent Management Center (iMC) PLAT95 vulnerabilities
- Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central16 vulnerabilities
- Matrix Operating Environment15 vulnerabilities
- Aruba ClearPass Policy Manager11 vulnerabilities
- System Management Homepage for Windows and Linux9 vulnerabilities
- HPE 3PAR Service Processors7 vulnerabilities
- HPE AutoPass License Server7 vulnerabilities
- Network Automation6 vulnerabilities
- HPE CentralView Fraud Risk Management5 vulnerabilities
- HPE Intelligent Management Center (IMC)5 vulnerabilities
- Aruba ClearPass4 vulnerabilities
- HP Network Node Manager (NNMi)4 vulnerabilities
- HPE OneView4 vulnerabilities
- SiteScope4 vulnerabilities
- Version Control Repository Manager (VCRM)4 vulnerabilities
- ArubaOS-Switch3 vulnerabilities
- Data Protector3 vulnerabilities
- HP Keyview3 vulnerabilities
- HPE Aruba Networking EdgeConnect SD-WAN Orchestrator3 vulnerabilities
- HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 103 vulnerabilities
- HPE Telco Network Function Virtual Orchestrator3 vulnerabilities
- Insight Remote Support3 vulnerabilities
- Moonshot Provisioning Manager Appliance3 vulnerabilities
- Systems Insight Manager using OpenSSL3 vulnerabilities
- Aruba AirWave2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-12545HIGH | A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. CWE-476Feb 15, 2018 | CVSS7.5v3.0 | EPSS6.57% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12549MEDIUM | A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. CWE-287Feb 15, 2018 | CVSS5.6v3.0 | EPSS0.31% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12547MEDIUM | A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Feb 15, 2018 | CVSS5.6v3.0 | EPSS0.408% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12544MEDIUM | HPE System Management - Cross-Site ScriptingA cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. | CVSS5.4v3.0 | EPSS4.52% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2017-12553MEDIUM | A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Feb 15, 2018 | CVSS5.6v3.0 | EPSS0.31% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12546MEDIUM | A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. CWE-119Feb 15, 2018 | CVSS5.6v3.0 | EPSS0.346% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12550MEDIUM | A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Feb 15, 2018 | CVSS5.6v3.0 | EPSS0.311% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12552MEDIUM | A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Feb 15, 2018 | CVSS5.6v3.0 | EPSS0.409% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-12548MEDIUM | A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. Feb 15, 2018 | CVSS5.6v3.0 | EPSS0.408% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |