.. / CVE-2020-7136

Exploit for HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access (CVE-2020-7136)

Description:

HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access.

Nuclei Template

View the template here CVE-2020-7136.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-7136.yaml
Copy

References:

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-hpesbmu03997en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03997en_us
https://nvd.nist.gov/vuln/detail/CVE-2020-7136
https://github.com/ARPSyndicate/kenzer-templates
https://www.tenable.com/security/research/tra-2020-02