Lucene search

[email protected]CVE-2019-5395

HistoryAug 09, 2019 - 5:15 p.m.

CVE-2019-5395

2019-08-0917:15:11

CWE-434

[email protected]

web.nvd.nist.gov

cve-2019-5395

remote arbitrary file upload

hpe 3par service processor

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

JSON

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.

Affected configurations

NVD

Node

hp3par_service_processor_firmwareRange<5.0.5.1

AND

hp3par_service_processorMatch-

CPENameOperatorVersion
hp:3par_service_processor_firmwarehp 3par service processor firmwarelt5.0.5.1

CPE	Name	Operator	Version
hp:3par_service_processor_firmware	hp 3par service processor firmware	lt	5.0.5.1

CNA Affected

[
  {
    "product": "HPE 3PAR Service Processor",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 5.0.5.1"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

JSON

Related for CVE-2019-5395

nvd1 prion1 cvelist1