Denial of service in HPE iMC PLAT

1) Denial of service

EUVDB-ID: #VU802

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2010-1632

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote unauthenticated user to access potentially sensitive information and cause DoS conditions.
The weakness exists due to access control error and lets attackers to view important data and cause the target system deny.
Successful exploitation of the vulnerability may result in information disclosure and denial of service on the vulnerable system.

Mitigation

Update to version 7.2.

Vulnerable software versions

HPE iMC PLAT: 3.3 - 7.1

CPE2.3

• cpe:2.3:h:hpe:hpe_imc_plat:3.3:*:*:*:*:*:*:*
• cpe:2.3:h:hpe:hpe_imc_plat:5.0:*:*:*:*:*:*:*
• cpe:2.3:h:hpe:hpe_imc_plat:5.1:*:*:*:*:*:*:*

External links

https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05289984

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.