Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2017-5821: HPE Intelligent Management Center allows attackers to run code remotely

CVE-2017-5821 · published 8 years ago

Summary

The HPE Intelligent Management Center version 7.3 E0504P04 can be tricked into executing malicious commands from a distance. This could let an attacker take control of the management system and affect the network it oversees. Apply the latest security update from HPE or restrict network access to the console immediately.

What to do

Update hp intelligent_management_center to version 7.3 or later.

Affected software

Vendor	Product	Affected versions
hp	intelligent_management_center	< 7.3 7.3 `cpe:2.3:a:hp:intelligent_management_center::::::::`

Original advisory text

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

References

http://www.securitytracker.com/id/1038560 Third Party Advisory VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

17% chance of attack within 30 days

Timeline

Published15 Feb 2018

Updated24 Oct 2026

First seen29 Sep 2026

Sources

CVE-2017-5821 · NVD

Track software like this

Free during beta