CVE-2020-7200

EPSS 81.9%

Vexday Risk Score

40Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 81.9%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

15 dic 2020Exploit Metasploit disponible

18 dic 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution.

Productos afectados

n/a · HPE Systems Insight Manager (SIM)

Referencias

http://packetstormsecurity.com/files/161721/HPE-Systems-Insight-Manager-AMF-Deserialization-Remote-Code-Execution.html https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04068en_us