Vulnerability Details CVE-2016-8511
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.156
EPSS Ranking 96.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://www.securityfocus.com/bid/94610
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849
- https://www.tenable.com/security/research/tra-2016-39
- http://www.securityfocus.com/bid/94610
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849
- https://www.tenable.com/security/research/tra-2016-39
Products affected by CVE-2016-8511
-
cpe:2.3:a:hp:network_automation:10.00
-
cpe:2.3:a:hp:network_automation:10.00.01
-
cpe:2.3:a:hp:network_automation:10.00.02
-
cpe:2.3:a:hp:network_automation:10.10
-
cpe:2.3:a:hp:network_automation:10.11
-
cpe:2.3:a:hp:network_automation:10.11.01
-
cpe:2.3:a:hp:network_automation:10.20
-
cpe:2.3:a:hp:network_automation:9.10
-
cpe:2.3:a:hp:network_automation:9.20
-
cpe:2.3:a:hp:network_automation:9.22
-
cpe:2.3:a:hp:network_automation:9.22.01
-
cpe:2.3:a:hp:network_automation:9.22.02