CVE-2020-7200

EPSS 81.9%

Vexday Risk Score

40Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 81.9%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

15 Dec 2020Metasploit module available

18 Dec 2020Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution.

Affected products

n/a · HPE Systems Insight Manager (SIM)

References

http://packetstormsecurity.com/files/161721/HPE-Systems-Insight-Manager-AMF-Deserialization-Remote-Code-Execution.html https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04068en_us