VulnerabilityModified
CVE-2013-4835
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
HIGH 7.5EPSS 71.0%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 71.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 71.00% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- hp/sitescope
- Source
- hp-security-alert@hp.com
References
- http://www.exploit-db.com/exploits/30473
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435Vendor Advisory
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435
- http://www.exploit-db.com/exploits/30473
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435Vendor Advisory
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.