Privilege escalation in HPE iMC PLAT - CVE-2017-8984
Published: January 29, 2018
Vulnerability identifier: #VU10320
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-8984
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain elevated privileges on the target system.
The weakness exists in HPE Intelligent Management Center (iMC) PLAT due to unspecified flaws. A remote attacker can execute arbitrary commands, write or delete arbitrary files with SYSTEM or root privileges.
Successful exploitation of the vulnerability may result in system compromise.
The weakness exists in HPE Intelligent Management Center (iMC) PLAT due to unspecified flaws. A remote attacker can execute arbitrary commands, write or delete arbitrary files with SYSTEM or root privileges.
Successful exploitation of the vulnerability may result in system compromise.
Affected software
HPE iMC PLAT
How to mitigate CVE-2017-8984
Update to version 7.3 E0506P07.