CVE-2013-2367
Hewlett-Packard SiteScope SOAP Call runOMAgentCommand Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.
Múltiples vulnerabilidades sin especificar en HP SiteScope 11.20 y 11.21, cuando SOAP es usado, permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos. Aka ZDI-CAN-1678.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability.
The specific flaw exists within APIBSMIntegrationImpl's processing of the runOMAgentCommand which can be invoked through SOAP requests without prior authentication. The omHost key can take in a value containing a windows shell command. An attacker can exploit this condition to gain remote code execution as SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2013-03-04 CVE Reserved
- 2013-07-30 CVE Published
- 2013-09-10 First Exploit
- 2024-09-17 CVE Updated
- 2024-10-24 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/28188 | 2013-09-10 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03861260 | 2019-10-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.20 Search vendor "Hp" for product "Sitescope" and version "11.20" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.21 Search vendor "Hp" for product "Sitescope" and version "11.21" | - |
Affected
| ||||||