CVE-2024-53676 - Vulnerability Details - OpenCVE

A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Hpe	Insight Remote Support

Configuration 1 [-]

cpe:2.3:a:hpe:insight_remote_support:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us

History

Wed, 11 Dec 2024 17:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-22

Wed, 27 Nov 2024 12:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hpe Hpe insight Remote Support
CPEs		cpe:2.3:a:hpe:insight_remote_support::::::::
Vendors & Products		Hpe Hpe insight Remote Support
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 27 Nov 2024 00:45:00 +0000

Type	Values Removed	Values Added
Description		A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.
Weaknesses		CWE-552
References		https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2024-11-27T00:18:28.527Z

Updated: 2024-11-27T12:11:13.717Z

Reserved: 2024-11-21T16:51:49.640Z

Link: CVE-2024-53676

Vulnrichment

Updated: 2024-11-27T12:01:39.293Z

NVD

Status : Analyzed

Published: 2024-11-27T01:15:05.250

Modified: 2024-12-11T16:49:45.783

Link: CVE-2024-53676

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-53676", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2024-11-21T16:51:49.640Z", "datePublished": "2024-11-27T00:18:28.527Z", "dateUpdated": "2024-11-27T12:11:13.717Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HPE Insight Remote Support", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [{"lessThan": "7.14.0.629", "status": "affected", "version": "0", "versionType": "product"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<pre>A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.</pre>"}], "value": "A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution."}], "impacts": [{"capecId": "CAPEC-549", "descriptions": [{"lang": "en", "value": "CAPEC-549 Local Execution of Code"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-552", "description": "CWE-552 Files or Directories Accessible to External Parties", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2024-11-27T00:18:28.527Z"}, "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-53676", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-27T12:01:36.688260Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:hpe:insight_remote_support:*:*:*:*:*:*:*:*"], "vendor": "hpe", "product": "insight_remote_support", "versions": [{"status": "affected", "version": "0", "lessThan": "7.14.0.629", "versionType": "custom"}], "defaultStatus": "unknown"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T12:11:13.717Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-53676", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2024-11-21T16:51:49.640Z", "datePublished": "2024-11-27T00:18:28.527Z", "dateUpdated": "2024-11-27T00:18:28.527Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HPE Insight Remote Support", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [{"lessThan": "7.14.0.629", "status": "affected", "version": "0", "versionType": "product"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<pre>A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.</pre>"}], "value": "A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution."}], "impacts": [{"capecId": "CAPEC-549", "descriptions": [{"lang": "en", "value": "CAPEC-549 Local Execution of Code"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-552", "description": "CWE-552 Files or Directories Accessible to External Parties", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2024-11-27T00:18:28.527Z"}, "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-53676", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-27T12:01:36.688260Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:hpe:insight_remote_support:*:*:*:*:*:*:*:*"], "vendor": "hpe", "product": "insight_remote_support", "versions": [{"status": "affected", "version": "0", "lessThan": "7.14.0.629", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2024-11-27T12:01:39.293Z"}, "title": "CISA ADP Vulnrichment"}]}}