ID de Prueba:	1.3.6.1.4.1.25623.1.0.803846
Categoría:	Web application abuses
Título:	HP/HPE System Management Homepage (SMH) Command Injection Vulnerability (HPSBMU02917)
Resumen:	HP/HPE System Management Homepage (SMH) is prone to a command; injection vulnerability.
Descripción:	Summary: HP/HPE System Management Homepage (SMH) is prone to a command injection vulnerability. Vulnerability Insight: The flaw is triggered when the ginkgosnmp.inc script uses the last path segment of the current requested URL path in an exec call without properly sanitizing the content. Vulnerability Impact: Successful exploitation will allow an authenticated remote attacker to execute arbitrary commands. Affected Software/OS: HP/HPE SMH version 7.2.1.3 and prior. Solution: Update to version 7.2.2 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-3576 CERT/CC vulnerability note: VU#735364 http://www.kb.cert.org/vuls/id/735364 HPdes Security Advisory: HPSBMU02917 http://marc.info/?l=bugtraq&m=137952496405683&w=2
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.