{"id":"CVE-2017-12557","published":"2018-02-15T22:00:00Z","modified":"2024-09-16T22:45:46Z","title":"A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and…","vendor":"Hewlett Packard Enterprise","product":"intelligent Management Center (iMC) PLAT","tier":"core","eol":null,"affectedVersions":[{"vendor":"Hewlett Packard Enterprise","product":"intelligent Management Center (iMC) PLAT","versions":["IMC Plat 7.3 E0504P2 and earlier"]}],"description":{"text":"A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.","provenance":"source","from":"CVE.org"},"summary":{"text":"A remote code execution flaw exists in Hewlett Packard Enterprise's intelligent Management Center (iMC) PLAT product, affecting version IMC Plat 7.3 E0504P2 and earlier. The available record does not specify the vulnerable component, the attack vector, or the conditions required to exploit it, so those details cannot be stated.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:19:02Z"},"cvss":null,"epss":{"score":0.79808,"percentile":0.99607,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/101152","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1039495","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03778en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/45952/","tags":["exploit","x_refsource_EXPLOIT-DB"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-4129","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4129","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":45952,"url":"https://www.exploit-db.com/exploits/45952","title":"HP Intelligent Management - Java Deserialization Remote Code Execution (Metasploit)","type":"remote","platform":"windows","date":"2018-12-04","verified":true,"provenance":"source"},{"id":45952,"url":"https://www.exploit-db.com/exploits/45952","title":"HP Intelligent Management - Java Deserialization Remote Code Execution (Metasploit)","type":"remote","platform":"windows","date":"2018-12-04","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2018-12-04"},"metasploit":[{"name":"HP Intelligent Management Java Deserialization RCE","module":"exploit/windows/http/hp_imc_java_deserialize","type":"exploit","disclosureDate":"2017-10-03","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_imc_java_deserialize.rb"}],"first":{"date":"2017-10-03","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_imc_java_deserialize.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/45952/"],"flow":[],"timeline":[{"date":"2017-10-03","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2018-12-04","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_imc_java_deserialize.rb","provenance":"source"},{"date":"2018-02-15","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-12557","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.92,"detail":"percentile 0.9961"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 2 Exploit-DB entries; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}