10
CVE-2013-4813
- EPSS 6.4%
- Published 16.09.2013 13:01:46
- Last modified 22.04.2025 14:51:37
- Source hp-security-alert@hp.com
- Teams watchlist Login
- Open Login
The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a HEAD request, aka ZDI-CAN-1745.
Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Identity Driven Manager Version4.0
Hp ≫ Procurve Manager Version3.20
Hp ≫ Procurve Manager Version4.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.4% | 0.901 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-94 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.