CVE-2017-5798

Опубликовано: 15 фев. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).

Ссылки

http://www.securityfocus.com/bid/98013
Third Party Advisory
VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
Vendor Advisory
https://www.exploit-db.com/exploits/41927/
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/98013
Third Party Advisory
VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
Vendor Advisory
https://www.exploit-db.com/exploits/41927/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:opencall_media_platform:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 3.4.2 (исключая)

cpe:2.3:a:hp:opencall_media_platform:*:*:*:*:*:*:*:*

Версия от 4.0.0 (включая) до 4.4.7 (исключая)

EPSS

Процентиль: 90%

0.05883

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-2393-jxcj-6567