CVE-2013-3574

EPSS 22.11%
Published 14.06.2013 13:07:29
Last modified 11.04.2025 00:51:21
Source cret@cert.org
Teams watchlist Login
Open Login

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Hp ≫ Insight Diagnostics Version9.4.0.4710

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	22.11%	0.956

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:C/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.kb.cert.org/vuls/id/324668

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2013-3574

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-3574

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-3574

EUVD