Lucene search

HpCVE-2019-16283

HistoryJun 09, 2023 - 6:15 p.m.

CVE-2019-16283

2023-06-0918:15:09

web.nvd.nist.gov

cve-2019-16283

security vulnerability

hp softpaq installer

arbitrary code execution

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

5.1%

JSON

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution.

Affected configurations

Nvd

Node

microsoftwindowsMatch-

AND

hpsoftpaq_installerMatch4.0.100.1189

VendorProductVersionCPE
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
hpsoftpaq_installer4.0.100.1189cpe:2.3:a:hp:softpaq_installer:4.0.100.1189:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
hp	softpaq_installer	4.0.100.1189	cpe:2.3:a:hp:softpaq_installer:4.0.100.1189:::::::*

CNA Affected

[
  {
    "versions": [
      {
        "version": "4.0.100.1189",
        "status": "affected"
      }
    ],
    "product": "HP Softpaq installer",
    "vendor": "HP Inc."
  }
]

References

support.hp.com/us-en/document/c06541912

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2019-16283