CVE-2012-3261
HP SiteScope 11.10-11.12 - Remote Code Execution via SOAP Feature
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-3261.
Includes Metasploit module exploits/multi/http/hp_sitescope_uploadfileshandler.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass (CVE-2012-3260) and arbitrary file upload (CVE-2012-3261) in HP SiteScope 11.20 to achieve remote code execution via a malicious JSP payload. It creates a user with empty credentials, authenticates, and uploads a JSP that decodes and executes a hex-encoded payload.
Description
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.
Exploits (1)
This Metasploit module exploits an authentication bypass (CVE-2012-3260) and arbitrary file upload (CVE-2012-3261) in HP SiteScope 11.20 to achieve remote code execution via a malicious JSP payload. It creates a user with empty credentials, authenticates, and uploads a JSP that decodes and executes a hex-encoded payload.