按 Enter 到主內容區
:::

TWCERT-電子報

:::
發布日期:
字型大小:

HPE網管平台iMC瑕疵影響廿餘硬體型號安全性

CVE編號 CVE-2017-8982,CVE-2017-8983,CVE-2017-8984
影響產品 iMC PLAT 7.3 E0504P02/ iMC PLAT 7.3 E0504P04 /iMC PLAT 7.3 E0506P03
解決辦法 iMC PLAT 7.3 E0506P07已公布,逕洽代理商獲得。
張貼日 2018-02-02
上稿單位 TWCERT/CC

●概述:
HP子公司Hewlett Packard Enterprise發展智慧型網管中心平台Intelligent Management Center(iMC),融合Layer 3以下使用者與設備訊息,進行集中化管理,如今在iMC PLAT 7.3系列分支版本出現3項缺陷,有遠端接管系統權限之可能性,將導致資料暴露和執行任意指令後果,搭配iMC設備約廿餘種,運作階段連線安全堪虞,目前漏洞技術細節仍未公開,然升級軟體已備妥,可循商業管道獲得。
●編註:
(1)研究指出Intelligent Management Center相關漏洞,俱由遠端未驗證身分者觸發,駭客可bypass系統認證機制而逕自接觸隱密資料,或者在受害設備上胡亂執行程式,最嚴重者採系統管理者權限,行使高階功能,異動增刪檔案。
(2)受影響硬體與iMC組合
‧JD125A HP IMC Std S/W Platform w/100-node
‧JD126A HP IMC Ent S/W Platform w/100-node
‧JD808A HP IMC Ent Platform w/100-node License
‧JD814A HP A-IMC Enterprise Edition Software DVD Media
‧JD815A HP IMC Std Platform w/100-node License
‧JD816A HP A-IMC Standard Edition Software DVD Media
‧JF288AAE HP Network Director to Intelligent Management Center Upgrade E-LTU
‧JF289AAE HP Enterprise Management System to Intelligent Management Center Upgrade E-LTU
‧JF377A HP IMC Std S/W Platform w/100-node Lic
‧JF377AAE HP IMC Std S/W Pltfrm w/100-node E-LTU
‧JF378A HP IMC Ent S/W Platform w/200-node Lic
‧JF378AAE HP IMC Ent S/W Pltfrm w/200-node E-LTU
‧JG546AAE HP IMC Basic SW Platform w/50-node E-LTU
‧JG548AAE HP PCM+ to IMC Bsc Upgr w/50-node E-LTU
‧JG549AAE HP PCM+ to IMC Std Upgr w/200-node E-LTU
‧JG747AAE HP IMC Std SW Plat w/ 50 Nodes E-LTU
‧JG748AAE HP IMC Ent SW Plat w/ 50 Nodes E-LTU
‧JG768AAE HP PCM+ to IMC Std Upg w/ 200-node E-LTU
‧JG550AAE HPE PCM+ Mobility Manager to IMC Basic WLAN Platform Upgrade 50-node and 150-AP E-LTU
‧JG590AAE HPE IMC Basic WLAN Manager Software Platform 50 Access Point E-LTU
‧JG660AAE HP IMC Smart Connect with Wireless Manager Virtual Appliance Edition E-LTU
‧JG766AAE HP IMC Smart Connect Virtual Appliance Edition E-LTU
‧JG767AAE HP IMC Smart Connect with Wireless Manager Virtual Appliance Edition E-LTU
‧JG768AAE HPE PCM+ to IMC Standard Software Platform Upgrade with 200-node E-LTU
‧JH704AAE Aruba IMC Std SW Plat w/50-node E-LTU
‧JH705AAE Aruba IMC Ent SW Plat w/50-node E-LTU

回頁首