Intrusion PreventionHP.iLO.Intelligent.Provisioning.Arbitrary.Command.Execution
Description
This indicates an attack attempt against a Code Execution vulnerability in HP Intelligent Provisioning.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker may be able to exploit this to execute arbitrary code on the affected systems.
Affected Products
HP Intelligent Provisioning 1.00 through 1.62(a), 2.00, and 2.10
Impact
System Compromise: Remote attacker can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor
https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04756070
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 41715 |
| Created | Dec 04, 2015 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2015-2135 |
| Exploit Prediction Score | 1.4% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | HP |