CVE ID | |
CVSS SCORE | 10.0, AV:N/AC:L/Au:N/C:C/I:C/A:C |
AFFECTED VENDORS |
Hewlett Packard Enterprise |
AFFECTED PRODUCTS |
Intelligent Management Center |
VULNERABILITY DETAILS |
The specific flaw exists within the processing of the dealInodeOfflineMsg message. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM.
|
ADDITIONAL DETAILS |
02/23/18 - ZDI reported 1st vulnerability to vendor -- Mitigation: |
DISCLOSURE TIMELINE |
|
CREDIT | sztivi |