Vulnerabilities > CVE-2013-6210 - Remote Code Execution vulnerability in HP Unified Functional Testing 11.0/11.5

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
hp
nessus
NVD
Published: 2014-03-16
Updated: 2019-10-09

Summary

Unspecified vulnerability in HP Unified Functional Testing before 12.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1932.

Vulnerable Configurations

Part Description Count
Application
Hp
2

Nessus

NASL familyWindows
NASL idHP_UFT_12_0.NASL
descriptionThe remote Windows host has a version of HP Unified Functional Testing prior to 12.0. It is, therefore, affected by an unspecified remote code execution vulnerability.
last seen2020-06-01
modified2020-06-02
plugin id73094
published2014-03-19
reporterThis script is Copyright (C) 2014-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/73094
titleHP Unified Functional Testing < 12.0 Remote Code Execution (HPSBMU02967)

Seebug

  • bulletinFamilyexploit
    descriptionBUGTRAQ ID: 66197 CVE(CAN) ID: CVE-2013-6210 HP Unified Functional Testing是一款自动化软件测试解决方案。 HP Unified Functional Testing 12.0之前版本在实现上存在安全漏洞，这可使远程攻击者利用此漏洞执行任意代码。 0 HP Unified Functional Testing &lt; 12.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04122007
    idSSV:61970
    last seen2017-11-19
    modified2014-03-28
    published2014-03-28
    reporterRoot
    titleHP Unified Functional Testing任意代码执行漏洞
  • bulletinFamilyexploit
    descriptionBugtraq ID:66197 CVE ID:CVE-2013-6210 HP Unified Functional Testing是一款惠普推出高级现代应用测试解决方案。 HP Unified Functional Testing存在一个未明安全漏洞，允许远程攻击者利用漏洞执行任意代码。 0 HP Unified Functional Testing HP Unified Functional Testing 12.0已经修复该漏洞，建议用户下载更新： http://www8.hp.com/us/en/software-solutions/unified-functional-testing-automated-testing/
    idSSV:61833
    last seen2017-11-19
    modified2014-03-18
    published2014-03-18
    reporterRoot
    titleHP Unified Functional Testing远程代码执行漏洞

References