CVE-2012-2986
HP SAN/iQ 9.5 - Authenticated OS Command Injection via Ping Endpoint Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-2986.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in HP VSA/SANiQ Hydra client by sending a crafted 'ping' request with embedded Perl reverse shell payload. It first authenticates using a backdoor login before executing the malicious command.
Description
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.
Exploits (2)
This exploit leverages a command injection vulnerability in HP VSA/SANiQ Hydra client by sending a crafted 'ping' request with embedded Perl reverse shell payload. It first authenticates using a backdoor login before executing the malicious command.
This Metasploit module exploits a command injection vulnerability in HP StorageWorks P4000 VSA by leveraging default credentials to inject arbitrary commands via a crafted ping request on port 13838.