Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2017-8982: HPE Intelligent Management Center permits remote login bypass
CVE-2017-8982 · published 8 years ago
Summary
The HPE Intelligent Management Center version 7.3 E0504P4 can be tricked into accepting a remote user without proper authentication. This could let an attacker gain access to network management functions. Apply the vendor’s security update or restrict remote access until it is patched.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| hp | intelligent_management_center |
7.3 cpe:2.3:a:hp:intelligent_management_center:7.3:e0504p04:*:*:*:*:*:* |
Original advisory text
A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.
A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.
References
- https://www.zerodayinitiative.com/advisories/ZDI-18-139/ Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1040283 Third Party Advisory VDB Entry
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03809en_us Vendor Advisory
- https://www.exploit-db.com/exploits/44648/ Exploit Third Party Advisory VDB Entry
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Feb 2018
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-8982 · NVD
Track software like this
Free during beta