CVE-2012-5204

published 2013-03-09

CVE-2012-5204: Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401…

Priority P3 54 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1614.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
hp	intelligent_management_center	<= 5.1	—
hp	intelligent_management_center	—	—
hp	intelligent_management_center	—	—
hp	intelligent_management_center_for_automated_network_manager	<= 5.1	—

Detection & IOCs extracted from sources · hover to see the quote

url /imc/ict/IctDownloadServlet↗

• → Look for unauthenticated HTTP requests targeting IctDownloadServlet with directory traversal sequences (e.g., ../../) in the request path or parameters, indicative of arbitrary file read attempts with SYSTEM privileges. ↗

• · Vulnerability affects HP iMC and iMC for ANM versions prior to 5.2 E0401; the Metasploit module was validated against HP iMC 5.1 E0202 on Windows 2003 SP2, so detection coverage may vary across other OS/version combinations. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.