SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2012-5217

HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2355.

MEDIUM 5.0EPSS 3.51%

Does this matter?

Lower severity and a low EPSS score (3.51%). Track it; it rarely justifies an emergency change on its own.

Description

HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2355.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
3.51% probability · 89th percentile
CISA KEV
Not listed
Weakness
CWE-264
Affected
hp/system management homepage
Source
hp-security-alert@hp.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.