Test ID:	1.3.6.1.4.1.25623.1.0.803846
Category:	Web application abuses
Title:	HP/HPE System Management Homepage (SMH) Command Injection Vulnerability (HPSBMU02917)
Summary:	HP/HPE System Management Homepage (SMH) is prone to a command; injection vulnerability.
Description:	Summary: HP/HPE System Management Homepage (SMH) is prone to a command injection vulnerability. Vulnerability Insight: The flaw is triggered when the ginkgosnmp.inc script uses the last path segment of the current requested URL path in an exec call without properly sanitizing the content. Vulnerability Impact: Successful exploitation will allow an authenticated remote attacker to execute arbitrary commands. Affected Software/OS: HP/HPE SMH version 7.2.1.3 and prior. Solution: Update to version 7.2.2 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-3576 CERT/CC vulnerability note: VU#735364 http://www.kb.cert.org/vuls/id/735364 HPdes Security Advisory: HPSBMU02917 http://marc.info/?l=bugtraq&m=137952496405683&w=2
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.