Remote Code Execution Vulnerability in HP SiteScope by HP

CVE-2012-3261

Summary

An unspecified vulnerability in a SOAP feature of HP SiteScope versions 11.10 through 11.12 enables remote attackers to execute arbitrary code. This vulnerability could lead to unauthorized access and control of systems running these versions of HP SiteScope. Users are advised to apply necessary patches and updates to safeguard their environments from potential exploitation.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2012-3261
Created by Rapid7

References