CVE-2016-4372
CriticalSummary
HPE iMC PLAT and other components before versions 7.2 E0403P04, 7.2 E0405P05, 7.2 E0401P04, 7.2 E0401P01, 7.2 E0402P02, and 7.2 E0405P05 are vulnerable to remote command execution by attackers exploiting a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Risk Assessment
Attackers can remotely execute commands, potentially leading to system takeover and data leakage. This poses a serious security threat to the organization.
Recommendation
It is recommended to update to the latest versions of HPE iMC software to mitigate this vulnerability. A security audit of systems should also be conducted to identify potential threats.
Original NVD description (English source)
HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAM_TAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.