CVE-2017-5817

This Metasploit module exploits an unauthenticated command injection vulnerability in HPE iMC's dbman service (OpCode 10007) by injecting commands into the database username field, leading to arbitrary command execution as SYSTEM.

This exploit targets a command injection vulnerability in HP iMC PLAT 7.2 via the dbman service on port 2810. It crafts a malicious packet to execute an arbitrary command (echo to a file) by manipulating opcode 10007.

This Metasploit module exploits an unauthenticated command injection vulnerability in HPE iMC's dbman service (CVE-2017-5817) by sending a crafted RestoreDBase packet with an unsanitized database username field, allowing arbitrary command execution as SYSTEM.