Lucene search

MitreCVE-2016-4386

HistorySep 29, 2016 - 2:59 p.m.

CVE-2016-4386

2016-09-2914:59:02

mitre

web.nvd.nist.gov

cve-2016-4386

hpe network automation software

local users

arbitrary files

security vulnerability

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON

HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.

Affected configurations

Nvd

Node

hpnetwork_automationMatch10.10

VendorProductVersionCPE
hpnetwork_automation10.10cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	network_automation	10.10	cpe:2.3:a:hp:network_automation:10.10:::::::*

References

www.securityfocus.com/bid/93218

www.securitytracker.com/id/1036929

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05281739

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON

Related for CVE-2016-4386