CVE-2017-10992 In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461.
CriticalCVSS 9.8
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc storage essentials | = 9.5.0.142 | No fix listed |
References
- labs.integrity.pt exploit third-party-advisory