Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-2612. PoCs published by Brandon Perry.
AI-analyzed exploit summary This Metasploit module exploits three vulnerabilities in HP Release Control: an information disclosure to retrieve admin ID, a privilege escalation to change the admin password, and an XXE vulnerability to read arbitrary files. It authenticates, escalates privileges, and then uses XXE to exfiltrate file contents.
Description
Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.
Exploits (1)
This Metasploit module exploits three vulnerabilities in HP Release Control: an information disclosure to retrieve admin ID, a privilege escalation to change the admin password, and an XXE vulnerability to read arbitrary files. It authenticates, escalates privileges, and then uses XXE to exfiltrate file contents.