CVE-2012-5202

published 2013-03-09

CVE-2012-5202: Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401…

Priority P3 54 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1612.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
hp	intelligent_management_center	<= 5.1	—
hp	intelligent_management_center	—	—
hp	intelligent_management_center	—	—
hp	intelligent_management_center_for_automated_network_manager	<= 5.1	—

Detection & IOCs extracted from sources · hover to see the quote

url /imc/fault/FaultDownloadServlet↗

• → Look for unauthenticated HTTP requests targeting FaultDownloadServlet, which may include directory traversal sequences (e.g., '../') in request parameters to read arbitrary files with SYSTEM privileges. ↗
• → Monitor for exploitation attempts against HP iMC versions prior to 5.2 E0401, particularly targeting the FaultDownloadServlet endpoint from remote/unauthenticated sources. ↗

• · The vulnerability details are described as 'unspecified' and vectors are 'unknown' per the NVD advisory, limiting precise detection rule construction beyond what is known from the Metasploit module. ↗
• · Exploitation has been confirmed on HP iMC 5.1 E0202 on Windows 2003 SP2; detection coverage should prioritize this platform/version combination. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.