Multiple vulnerabilities in HP Insight Diagnostics

Description

Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities

1. Improper PHP include restrictions can be exploited via a path parameter;
2. A path traversal vulnerability can be exploited remotely via a devicePath parameter;
3. Unknown vectors can be exploited remotely.

Original advisories

Related products

• HP-Insight-Diagnostics

CVE list

• CVE-2013-3573
  critical
• CVE-2013-3574
  high
• CVE-2013-3575
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com