CVE-2017-5816

This exploit leverages a command injection vulnerability in HP iMC PLAT 7.2 via opcode 10008 in the dbman service. It constructs a malicious ASN.1 message to inject a command that writes the output of 'whoami' to a file.

This Metasploit module exploits an unauthenticated remote command execution vulnerability in HPE iMC's dbman service by injecting arbitrary commands via unsanitized database instance IDs. It leverages OpCode 10008 to restart a database instance, allowing SYSTEM-level command execution.

This Metasploit module exploits an unauthenticated RCE vulnerability in HPE iMC's dbman service by sending a crafted RestartDB packet with an unsanitized database instance ID, allowing arbitrary command execution as SYSTEM.