{"uuid": "e39609ef-b559-4fcd-87f4-e8824aea3a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpe_sim_76_amf_deserialization.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x64\", \"author\": [\"Harrison Neal\", \"Jang\", \"Grant Willcox\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A remotely exploitable vulnerability exists within HPE System Insight Manager (SIM) version 7.6.x that can be\\n          leveraged by a remote unauthenticated attacker to execute code within the context of HPE System Insight\\n          Manager's hpsimsvc.exe process, which runs with administrative privileges. The vulnerability occurs due\\n          to a failure to validate data during the deserialization process when a user submits a POST request to\\n          the /simsearch/messagebroker/amfsecure page. This module exploits this vulnerability by leveraging an\\n          outdated copy of Commons Collection, namely 3.2.2, that ships with HPE SIM, to gain\\n          RCE as the administrative user running HPE SIM.\", \"disclosure_date\": \"2020-12-15\", \"fullname\": \"exploit/windows/http/hpe_sim_76_amf_deserialization\", \"is_install_path\": true, \"mod_time\": \"2024-07-24 16:42:43 +0000\", \"name\": \"HPE Systems Insight Manager AMF Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/hpe_sim_76_amf_deserialization.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/hpe_sim_76_amf_deserialization\", \"references\": [\"CVE-2020-7200\", \"URL-https://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\", \"URL-https://www.zerodayinitiative.com/advisories/ZDI-20-1449/\", \"URL-https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04068en_us\"], \"rport\": 50000, \"session_types\": false, \"targets\": [\"Windows Command\", \"Windows Powershell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:51.376244Z"}