CVE-2017-10992

In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-03-10

Last modified

2024-08-05

Weaknesses

CWE-502

Affected products

• Storage Essentials (Hp)

References

• https://labs.integrity.pt/advisories/cve-2017-10992/