Every CVE Search/ Get API key

CVE-2011-1853

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote...

10.0 High

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.

Exploit likelihood

11.5%Down 13.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.

Record
CVE-2011-1853
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.

Record
CVE-2011-1853
Updated
2026-11-02
EUVDEUVD-2011-1851 No score

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.

Record
EUVD-2011-1851
Updated
2026-11-03
GitHub AdvisoriesGHSA-mcg8-rv6g-6g29 No score

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote...

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.

Record
GHSA-mcg8-rv6g-6g29
Weakness
CWE-20
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1853 is a high vulnerability (CVSS 10.0) in Hp Intelligent Management Center, published May 13, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.5%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open