CVE-2012-5203

published 2013-03-09

CVE-2012-5203: Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401…

Priority P3 54 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1613.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
hp	intelligent_management_center	<= 5.1	—
hp	intelligent_management_center	—	—
hp	intelligent_management_center	—	—
hp	intelligent_management_center_for_automated_network_manager	<= 5.1	—

Detection & IOCs extracted from sources · hover to see the quote

url /imc/report/ReportImgServlt↗

• → Look for unauthenticated HTTP requests targeting the ReportImgServlt endpoint with directory traversal sequences (e.g., '../') in HP iMC ↗
• → Monitor for file retrieval attempts via ReportImgServlt that traverse outside the web root, particularly on Windows systems where SYSTEM-level file access would be indicated ↗

• · Vulnerability affects HP iMC and iMC for ANM versions before 5.2 E0401; exploitation confirmed on version 5.1 E0202 ↗
• · The attack vector is remote and unauthenticated, requiring no credentials to exploit the directory traversal ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.