First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2017-8948

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Feb 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-89495.5A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89505.5A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89517.8A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89527.5A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.CVE-2017-89535.4A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier CVE-2017-89549.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.CVE-2017-89557.5A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.CVE-2017-89569.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.CVE-2017-89579.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.CVE-2017-89588.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 and earlier was found.CVE-2017-89598.8An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found.CVE-2017-89609.8An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found.

CVE-2017-8948: Critical severity, CVSS 9.8 | Vulnix