CVE-2017-5799

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
hpeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
hpopencall_media_platform
3.0.0 ≤
𝑥
< 3.4.2
hpopencall_media_platform
4.0.0 ≤
𝑥
< 4.4.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/98013
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
https://www.exploit-db.com/exploits/41927/
http://www.securityfocus.com/bid/98013
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
https://www.exploit-db.com/exploits/41927/