CVE-2013-6221

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

77.94% chance of exploitation in the next 30 days, 100th percentile

Published

2014-06-18

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/33891

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33891

References

• CVE Record
• NVD entry

Related

• CVE-2013-6194
• CVE-2013-6225
• CVE-2013-6167
• CVE-2013-6227
• CVE-2013-6166
• CVE-2013-6229