CVE-2007-4590: The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local…

Description

The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 34% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

DY

Dynrootdisk · HP

a.1.0.16.417; a.1.0.18.245; a.1.1.0.344; a.2.0.0.592 · source: NVD

HP

Hp-ux · HP

11.11; 11.23; 11.31 · source: NVD

IG

Ignite-ux · HP

c.7.0.212; c.7.1.92; c.7.2.93; c.7.3.144 · source: NVD