high7.7Public exploit code
CVE-2012-2986
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacte…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP StorageWorks P4000 - Virtual SAN Appliance Command Execution (Metasploit)2012-05-21 · remote · hardware · Verified
- HP VSA - Remote Command Execution2012-02-17 · remote · hardware · Verified
Impact
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | San\/Iq | Version 9.5 |