CVE-2013-4810 - HP Multiple Products Remote Code Execution Vulnerability

CVE ID:CVE-2013-4810

Project:Hewlett Packard (HP)

Product:ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management

Date Added:2022-03-25Due Date:2022-04-15

Vulnerability Name

HP Multiple Products Remote Code Execution Vulnerability

Description

HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-4810