CVE-2013-4810criticalunder attackCWE-94

CVE-2013-4810

Published · Updated

Follow this CVE+ Monitor ProCurve Manager, PCM+, Identity Driven Manager, and Application Lifecycle Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 9.8epss 79%
from disclosure to weapon21 days
Published on NVDSep 13
1st PoC+21d
CISA KEV+3115d
Action required by CISAfederal deadline: 2022-04-15

Apply updates per vendor instructions.

In short

HP ProCurve Manager and related applications allow attackers to run malicious code remotely by sending specially crafted data to web services. This is a critical flaw because an attacker needs no credentials and can take complete control of the affected system.

Technical detail

Remote code execution vulnerability in EJBInvokerServlet and JMXInvokerServlet components via unsafe deserialization of marshalled objects (CWE-94). Unauthenticated attackers can exploit this by sending malicious serialized Java objects to vulnerable endpoints, resulting in arbitrary code execution with application privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplicate of CVE-2007-1036, CVE-2010-0738, and/or CVE-2012-0874.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.