Lucene search

K
cve[email protected]CVE-2016-8529
HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2016-8529

2018-02-1522:29:01
CWE-284
web.nvd.nist.gov
20
cve-2016-8529
remote command execution
hpe storevirtual
storevirtual vsa
lefthand os
nvd

7.3 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:P/I:P/A:C

7.6 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

7.7 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.7%

A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.

Affected configurations

NVD
Node
hplefthandRange12.5
CPENameOperatorVersion
hp:lefthandhp lefthandle12.5

CNA Affected

[
  {
    "product": "StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "LeftHand OS v12.5 and earlier"
      }
    ]
  }
]

7.3 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:P/I:P/A:C

7.6 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

7.7 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.7%

Related for CVE-2016-8529