Hewlett Packard Enterprise
System Management Homepage
The specific flaw exists within the handling of /proxy/SetSMHData requests. When parsing admin-group, operator-group, or user-group parameters, the process copies user-supplied data into a fixed-length stack buffer. A remote attacker can leverage this vulnerability to execute remote code under the context of the process.
Hewlett Packard Enterprise has issued an update to correct this vulnerability. More details can be found at:
|Tenable Network Security