Hp CVEs — known vulnerabilities

System Management Homepage MEDIUM 5.0

CVE-2012-5217

HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via …

Fix: after 7.2

Fix from $1,600 2013-07-22

Network Node Manager I HIGH 7.5

CVE-2013-2351

Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00, 9.1x, and 9.2x allows remote attackers to obtain sensitive information, modify da…

No fix yet

Fix from $1,950 2013-07-13

San\/iq HIGH 9.4

CVE-2013-2352

LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-resp…

Fix: after 10.5

Fix from $1,950 2013-07-10

Integrated Lights Out Bmc HIGH 10.0

CVE-2013-4784EPSS 50%

The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using c…

Mitigation only

Fix from $1,950 2013-07-08

3com Baseline Plus Switch HIGH 10.0

CVE-2013-2340EPSS 10%

Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658250-B21, and 658247-B21; HP 3…

Mitigation only

Fix from $1,950 2013-07-06

3com Baseline Plus Switch HIGH 7.1

CVE-2013-2341

Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658250-B21, and 658247-B21; HP 3…

Mitigation only

Fix from $1,950 2013-07-06

Lefthand P4000 Virtual San Appliance HIGH 10.0

CVE-2013-2343EPSS 62%

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code …

Fix: after 9.0

Fix from $1,950 2013-07-02

Storeonce D2d HIGH 7.7

CVE-2013-2342

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attack…

Fix: after 2.2.17

Fix from $1,950 2013-06-30

Nonstop Sql\/mx MEDIUM 6.0

CVE-2013-2323

HP SQL/MX 3.0 through 3.2 on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to bypass intended access restrictions …

Mitigation only

Fix from $1,600 2013-06-28

Integrated Lights Out 3 Firmware HIGH 10.0

CVE-2013-2338EPSS 10%

Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, …

Fix: after 1.55

Fix from $1,950 2013-06-14

System Management Homepage HIGH 9.0

CVE-2013-3576EPSS 67%

ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the…

No fix yet

Fix from $1,950 2013-06-14

Service Manager MEDIUM 5.0

CVE-2013-2336

HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to obtain sensitive information via unspecified vecto…

No fix yet

Fix from $1,600 2013-06-14

Insight Diagnostics HIGH 10.0

CVE-2013-3573

HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors.

No fix yet

Fix from $1,950 2013-06-14

Insight Diagnostics HIGH 7.8

CVE-2013-3574

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attacker…

Mitigation only

Fix from $1,950 2013-06-14

Insight Diagnostics MEDIUM 5.0

CVE-2013-3575

hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows r…

Mitigation only

Fix from $1,600 2013-06-14

Storage Data Protector HIGH 10.0

CVE-2013-2324EPSS 39%

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vecto…

Mitigation only