CVE-2017-12557

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise	intelligent Management Center (iMC) PLAT	IMC Plat 7.3 E0504P2 and earlier

References

http://www.securityfocus.com/bid/101152Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039495Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_usVendor Advisory
https://www.exploit-db.com/exploits/45952/Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/101152Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039495Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_usVendor Advisory
https://www.exploit-db.com/exploits/45952/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Feb 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-125589.8A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.CVE-2017-125596.5A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found.CVE-2017-12566.1IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i CVE-2017-125606.5A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found.CVE-2017-125619.8A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found.CVE-2017-125629.8Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a CVE-2017-125636.5In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to CVE-2017-125646.5In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause CVE-2017-125656.5In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cau CVE-2017-125666.5In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause CVE-2017-125679.8SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.10 CVE-2017-125687.5Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to