Intrusion PreventionHPE.Network.Automation.RedirectServlet.SQL.Injection
Description
This indicates an attack attempt to exploit a SQL Injection vulnerability in HPE Network Automation.
The vulnerability is due to insufficient validation of HTTP parameters when processing HTTP requests. It may allow remote attackers to execute arbitrary SQL statements via a crafted HTTP request which could lead to arbitrary code execution with database privileges.
Affected Products
HPE Network Automation 10.0x prior to 10.00.022
HPE Network Automation 10.1x prior to 10.11.03
HPE Network Automation 10.2x prior to 10.21.01
HPE Network Automation v9.1x
HPE Network Automation v9.2x
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-07-12 | 25.599 | Sig Added |
| 2019-06-10 | 14.629 | Severity:high:critical |
| ID | 44118 |
| Created | Jun 30, 2017 |
| Updated | Jul 11, 2023 |
| Risk |
|
| CVE ID | CVE-2017-5810 |
| Exploit Prediction Score | 35.45% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | HP |