Vulnerability Details CVE-2011-0890
HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default configuration, which allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read community.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=130082163516878&w=2
- http://marc.info/?l=bugtraq&m=130082163516878&w=2
- http://securityreason.com/securityalert/8163
- http://securitytracker.com/id?1025239
- http://www.securityfocus.com/bid/46981
- http://www.vupen.com/english/advisories/2011/0755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66242
- http://marc.info/?l=bugtraq&m=130082163516878&w=2
- http://marc.info/?l=bugtraq&m=130082163516878&w=2
- http://securityreason.com/securityalert/8163
- http://securitytracker.com/id?1025239
- http://www.securityfocus.com/bid/46981
- http://www.vupen.com/english/advisories/2011/0755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66242
Products affected by CVE-2011-0890
-
cpe:2.3:a:hp:discovery&dependency_mapping_inventory:7.50
-
cpe:2.3:a:hp:discovery&dependency_mapping_inventory:7.51
-
cpe:2.3:a:hp:discovery&dependency_mapping_inventory:7.60
-
cpe:2.3:a:hp:discovery&dependency_mapping_inventory:7.61
-
cpe:2.3:a:hp:discovery&dependency_mapping_inventory:7.70
-
cpe:2.3:a:hp:discovery&dependency_mapping_inventory:9.30
-
cpe:2.3:o:microsoft:windows:-
-
cpe:2.3:o:microsoft:windows:1.0
-
cpe:2.3:o:microsoft:windows:2.0
-
cpe:2.3:o:microsoft:windows:2000
-
cpe:2.3:o:microsoft:windows:3.0
-
cpe:2.3:o:microsoft:windows:3.1
-
cpe:2.3:o:microsoft:windows:3.11
-
cpe:2.3:o:microsoft:windows:server_2008
-
cpe:2.3:o:microsoft:windows:vista