Intrusion PreventionHPE.IMC.TopoMsgServlet.className.Code.Injection
Description
This indicates an attack attempt to exploit a Code Injection Vulnerability in HP Intelligent Management Center.
A remote, authenticated attacker can exploit this vulnerability by sending a request message with a serialized object. Successful exploitation results in the execution of arbitrary code under the context of the SYSTEM user.
Affected Products
HP Intelligent Management Center prior to 7.3 E0703
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03930en_us
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48266 |
| Created | Aug 15, 2019 |
| Updated | Aug 27, 2019 |
| Risk |
|
| CVE ID | CVE-2019-11942 |
| Exploit Prediction Score | 0.5% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | HP |