A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found.
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Link | Tags |
---|---|
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382349 | vendor advisory |
http://www.securityfocus.com/bid/95868 | third party advisory vdb entry |
https://www.exploit-db.com/exploits/41297/ | third party advisory vdb entry exploit |