HP Systems Insight Manager < 7.2 Multiple Vulnerabilities

critical Nessus Plugin ID 72963

Synopsis

The remote Windows host contains software that is affected by multiple vulnerabilities.

Description

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the included Flash components.

Solution

Upgrade to HP Systems Insight Manager 7.2 or later.

See Also

http://www.nessus.org/u?39ef0afe

http://www.nessus.org/u?6d0c8735

Plugin Details

Severity: Critical

ID: 72963

File Name: hp_systems_insight_manager_72_multiple_vulns.nasl

Version: 1.8

Type: local

Agent: windows

Family: Windows

Published: 3/12/2014

Updated: 3/8/2022

Supported Sensors: Nessus Agent

Risk Information

VPR

Risk Factor: Critical

Score: 9.6

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: E:H/RL:OF/RC:C

CVSS Score Source: CVE-2012-4167

Vulnerability Information

CPE: cpe:/a:hp:systems_insight_manager

Required KB Items: installed_sw/HP Systems Insight Manager

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/1/2013

Vulnerability Publication Date: 8/15/2012

CISA Known Exploited Dates: 3/24/2022

Exploitable With

CANVAS (CANVAS)

Metasploit (Adobe Flash Player 11.3 Kern Table Parsing Integer Overflow)

Reference Information

CVE: CVE-2012-1535, CVE-2012-4163, CVE-2012-4164, CVE-2012-4165, CVE-2012-4167, CVE-2012-4168

BID: 55009, 56189, 56192, 56196, 56197, 56199

EDB-ID: 20624

HP: emr_na-c03651388, HPSBMU02948, SSRT100986