CVE-2013-3576

high · 9

ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.

CVSS

66.6%

EPSS (exploit prob.)

99th

EPSS percentile

2013-06-14

Published

AV:N/AC:L/Au:S/C:C/I:C/A:C

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
hp	system_management_homepage	all versions

Check a specific version with /api/v1/cve/match.

References

http://marc.info/?l=bugtraq&m=137952496405683&w=2
http://www.kb.cert.org/vuls/id/735364
http://marc.info/?l=bugtraq&m=137952496405683&w=2
http://www.kb.cert.org/vuls/id/735364

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-3576