Lucene search

[email protected]CVE-2016-4376

HistoryAug 22, 2016 - 10:59 a.m.

CVE-2016-4376

2016-08-2210:59:05

CWE-254

[email protected]

web.nvd.nist.gov

cve-2016-4376

hpe

fos

storefabric b switches

remote attackers

sensitive information

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%

JSON

HPE FOS before 7.4.1d and 8.x before 8.0.1 on StoreFabric B switches allows remote attackers to obtain sensitive information via unspecified vectors.

Affected configurations

NVD

Node

broadcomfabric_operating_systemRange≤7.4.1

broadcomfabric_operating_systemMatch8.0.0

AND

hpstorefabric_b_series_switchMatch-

CPENameOperatorVersion
broadcom:fabric_operating_systembroadcom fabric operating systemle7.4.1
broadcom:fabric_operating_systembroadcom fabric operating systemeq8.0.0

CPE	Name	Operator	Version
broadcom:fabric_operating_system	broadcom fabric operating system	le	7.4.1
broadcom:fabric_operating_system	broadcom fabric operating system	eq	8.0.0

References

www.securityfocus.com/bid/92480

h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05236212

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%

JSON

Related for CVE-2016-4376

prion1 cvelist1 nvd1