Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647.
Published 2013-10-13 10:20:04
Updated 2019-10-09 23:08:26
Source HP Inc.
View at NVD,   CVE.org
Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2013-4826

Probability of exploitation activity in the next 30 days: 1.85%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 88 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2013-4826

  • HP Intelligent Management SOM FileDownloadServlet Arbitrary Download
    First seen: 2020-04-26
    auxiliary/scanner/http/hp_imc_som_file_download
    This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the FileDownloadServlet from the SOM component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on H

CVSS scores for CVE-2013-4826

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
5.0
MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N
10.0
2.9
NIST

CWE ids for CVE-2013-4826

References for CVE-2013-4826

Products affected by CVE-2013-4826

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!