Intrusion Prevention

HPE.IMC.perfSelectTask.Code.Injection

Description

This indicates an attack attempt to exploit a Code Injection Vulnerability in HP Intelligent Management Center.
A remote, authenticated attacker can exploit this vulnerability by sending a crafted HTTP request to the target system. Successful exploitation results in the execution of arbitrary code on the target system.

Affected Products

HP Intelligent Management Center prior to 7.3 E0703

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03930en_us

CVE References

CVE-2019-5385