HP TippingPoint SMS and vSMS JBoss RMI Remote Code Execution Vulnerability

HP TippingPoint SMS and vSMS JBoss RMI Remote Code Execution Vulnerability
HP TippingPoint SMS and vSMS JBoss RMI Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:

HP TippingPoint SMS <4.2 patch 1
HP TippingPoint SMS <4.1 patch 3

Description:

CVE (CAN) ID: CVE-2015-2117

HP TippingPoint SMS is the network security management system of TippingPoint.

No authentication is performed on JBoss RMI requests in versions earlier than hp sms, vSMS 4.1 patch 3, and versions earlier than 4.2 patch 1, which allows remote attackers to exploit this vulnerability to execute arbitrary code. This vulnerability is located in the RMI component on TCP port 4444.

<* Source: HP
*>

Suggestion:

Vendor patch:

HP
--
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay? DocId = emr_na-c04626974

This article permanently updates the link address: