Vulnerability Details : CVE-2013-4823
Public exploit exists!
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607.
Exploit prediction scoring system (EPSS) score for CVE-2013-4823
Probability of exploitation activity in the next 30 days: 91.62%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2013-4823
-
HP Intelligent Management BIMS DownloadServlet Directory Traversal
First seen: 2020-04-26auxiliary/scanner/http/hp_imc_bims_downloadservlet_traversalThis module exploits a lack of authentication and a directory traversal in HP Intelligent Management, specifically in the DownloadServlet from the BIMS component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully
CVSS scores for CVE-2013-4823
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2013-4823
-
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943425
HP Support for Technical Help and Troubleshooting | HP® Customer Service.Vendor Advisory
Products affected by CVE-2013-4823
- cpe:2.3:a:hp:intelligent_management_center:*:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l01:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h03:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l02:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.0:e0101h04:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.1:e0101p01:*:*:*:*:*:*
- cpe:2.3:a:hp:intelligent_management_center:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:hp:imc_branch_intelligent_management_system_software_module:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:imc_branch_intelligent_management_system_software_module:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:imc_branch_intelligent_management_system_software_module:5.2:*:*:*:*:*:*:*