Remote Code Execution Vulnerability in HPE System Management Homepage
CVE-2016-1995

9.8CRITICAL

Key Information:

Vendor
HP
Status
System Management Homepage
Vendor
CVE Published:
18 March 2016

Summary

Hewlett Packard Enterprise's System Management Homepage, prior to version 7.5.4, is susceptible to a vulnerability that allows remote attackers to execute arbitrary code. The flaw stems from unspecified vectors that can be exploited by malicious entities, posing significant risks to system integrity and security. It is crucial for users of affected versions to update their software to bolster security and mitigate potential attacks.

References

http://www.securitytracker.com/id/1035325
vdb-entryx_refsource_SECTRACK
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM

EPSS Score

37% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.