Design/Logic Flaw

2016-09-2914:59:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.147 Low

EPSS

Percentile

95.8%

JSON

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.

CPENameOperatorVersion
network_automationeq9.22
network_automationeq9.22.02
network_automationeq10.00.02
network_automationeq9.22.01
network_automationeq10.11
network_automationeq9.10
network_automationeq10.00.01
network_automationeq10.10
network_automationeq10.00
network_automationeq9.20

Name	Operator	Version
network_automation	eq	9.22
network_automation	eq	9.22.02
network_automation	eq	10.00.02
network_automation	eq	9.22.01
network_automation	eq	10.11
network_automation	eq	9.10
network_automation	eq	10.00.01
network_automation	eq	10.10
network_automation	eq	10.00
network_automation	eq	9.20