CVE-2017-8990

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-06 · updated 2026-06-17

Description

A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earlier than version WSM 7.3 (E0506). This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version.

Affected products

Hewlett Packard Enterprise HPE Intelligent Management Center (IMC) Wirelss Service Manager: before 7.3; 7.3-e0506 — fixed in 7.3

How to fix

Upgrade to a fixed version: Hewlett Packard Enterprise HPE Intelligent Management Center (IMC) Wirelss Service Manager 7.3. Check the vendor advisory for mitigations.

References

http://www.securitytracker.com/id/1040988
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03852en_us
http://www.securitytracker.com/id/1040988
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03852en_us

Get alerted when CVE-2017-8990 or the next vulnerability affects your stack