Lucene search

[email protected]CVE-2016-4385

HistorySep 29, 2016 - 2:59 p.m.

CVE-2016-4385

2016-09-2914:59:00

CWE-502

[email protected]

web.nvd.nist.gov

cve-2016-4385

hp network automation software

remote code execution

arbitrary commands

java

apache commons collections

commons beanutils

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.5 High

AI Score

Confidence

High

0.147 Low

EPSS

Percentile

95.8%

JSON

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.

Affected configurations

NVD

Node

hpnetwork_automationMatch9.10

hpnetwork_automationMatch9.20

hpnetwork_automationMatch9.22

hpnetwork_automationMatch9.22.01

hpnetwork_automationMatch9.22.02

hpnetwork_automationMatch10.00

hpnetwork_automationMatch10.00.01

hpnetwork_automationMatch10.00.02

hpnetwork_automationMatch10.10

hpnetwork_automationMatch10.11

CPENameOperatorVersion
hp:network_automationhp network automationeq9.10
hp:network_automationhp network automationeq9.20
hp:network_automationhp network automationeq9.22
hp:network_automationhp network automationeq9.22.01
hp:network_automationhp network automationeq9.22.02
hp:network_automationhp network automationeq10.00
hp:network_automationhp network automationeq10.00.01
hp:network_automationhp network automationeq10.00.02
hp:network_automationhp network automationeq10.10
hp:network_automationhp network automationeq10.11

CPE	Name	Operator	Version
hp:network_automation	hp network automation	eq	9.10
hp:network_automation	hp network automation	eq	9.20
hp:network_automation	hp network automation	eq	9.22
hp:network_automation	hp network automation	eq	9.22.01
hp:network_automation	hp network automation	eq	9.22.02
hp:network_automation	hp network automation	eq	10.00
hp:network_automation	hp network automation	eq	10.00.01
hp:network_automation	hp network automation	eq	10.00.02
hp:network_automation	hp network automation	eq	10.10
hp:network_automation	hp network automation	eq	10.11

References

www.securityfocus.com/bid/93109

www.zerodayinitiative.com/advisories/ZDI-16-523/

h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05279098

www.tenable.com/security/research/tra-2016-27

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.5 High

AI Score

Confidence

High

0.147 Low

EPSS

Percentile

95.8%

JSON

Related for CVE-2016-4385

prion1 nvd1 zdi1 cvelist1 nessus1 impervablog1