CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 10.0. Its EPSS score suggests a 71.3% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2013-4811
Severity
HIGH
CVSS
10
EPSS
71.29%
Original NVD Description
UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.