Lucene search

PRIOn knowledge basePRION:CVE-2016-4385

HistorySep 29, 2016 - 2:59 p.m.

Design/Logic Flaw

2016-09-2914:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.131 Low

EPSS

Percentile

95.4%

JSON

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.

CPENameOperatorVersion
network_automationeq9.22
network_automationeq9.22.02
network_automationeq10.00.02
network_automationeq9.22.01
network_automationeq10.11
network_automationeq9.10
network_automationeq10.00.01
network_automationeq10.10
network_automationeq10.00
network_automationeq9.20

Name	Operator	Version
network_automation	eq	9.22
network_automation	eq	9.22.02
network_automation	eq	10.00.02
network_automation	eq	9.22.01
network_automation	eq	10.11
network_automation	eq	9.10
network_automation	eq	10.00.01
network_automation	eq	10.10
network_automation	eq	10.00
network_automation	eq	9.20

References

www.securityfocus.com/bid/93109

www.zerodayinitiative.com/advisories/ZDI-16-523/

h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05279098

www.tenable.com/security/research/tra-2016-27

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.131 Low

EPSS

Percentile

95.4%

JSON

Related for PRION:CVE-2016-4385