Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-2367.
PoCs published by Metasploit, including Metasploit module exploits/windows/http/hp_sitescope_runomagentcommand.
AI-analyzed exploit summary This Metasploit module exploits a remote code execution flaw in HP SiteScope via the opcactivate.vbs script, which is reachable through the APIBSMIntegrationImpl AXIS service. It uses WScript.Shell.run() to execute cmd.exe with user-provided data, achieving RCE on vulnerable systems.
Description
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.
Exploits (2)
This Metasploit module exploits a remote code execution flaw in HP SiteScope via the opcactivate.vbs script, which is reachable through the APIBSMIntegrationImpl AXIS service. It uses WScript.Shell.run() to execute cmd.exe with user-provided data, achieving RCE on vulnerable systems.
This Metasploit module exploits a code execution flaw in HP SiteScope via the opcactivate.vbs script, which uses WScript.Shell.run() to execute cmd.exe with user-provided data. It leverages a SOAP request to trigger the vulnerability and achieve remote command execution.