{"id":"CVE-2024-53676","published":"2024-11-27T00:18:28Z","modified":"2025-03-05T14:58:05Z","title":"A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution","vendor":"Hewlett Packard Enterprise (HPE)","product":"HPE Insight Remote Support","tier":"core","eol":null,"affectedVersions":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"HPE Insight Remote Support","versions":["< 7.14.0.629"]}],"description":{"text":"A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.","provenance":"source","from":"CVE.org"},"summary":{"text":"A directory traversal flaw in Hewlett Packard Enterprise's HPE Insight Remote Support product may allow remote code execution. An attacker with network access can exploit it without authentication or user interaction, and the affected files or directories are accessible to external parties.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:23Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.56287,"percentile":0.9905,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-552","name":"Files or Directories Accessible to External Parties"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us","tags":[]},{"url":"https://github.com/pwnfuzz/POCs/tree/main/CVE-2024-53676","tags":["exploit"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-52024","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-52024","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":["https://github.com/pwnfuzz/POCs/tree/main/CVE-2024-53676"],"flow":[],"timeline":[{"date":"2024-11-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-53676","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":31.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.81,"detail":"percentile 0.9905"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}