Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:CTS:HPE-BYTE-MSG-RCE

Severity

Critical

Recommended

Yes

Recommended Action

Drop

Category

HTTP

Keywords

HPE Intelligent Management Center ByteMessageResource Insecure Deserialization Remote Code Execution

Release Date

2019/11/28

Update Number

3228

Supported Platforms

idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: HPE Intelligent Management Center ByteMessageResource Insecure Deserialization Remote Code Execution


This signature detects attempts to exploit a known vulnerability against HPE Intelligent Management Center. A successful attack can lead to arbitrary code execution.

Extended Description

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

Affected Products

  • Hp intelligent_management_center 5.0
  • Hp intelligent_management_center 5.1
  • Hp intelligent_management_center 5.2
  • Hp intelligent_management_center 7.0
  • Hp intelligent_management_center 7.2
  • Hp intelligent_management_center 7.3

References

  • CVE: CVE-2019-11956
  • URL: https://support.hpe.com/hpsc/doc/public/display?doclocale=en_us&docid=emr_na-hpesbhf03930en_us
  • URL: http://www.zerodayinitiative.com/advisories/zdi-19-528/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out