Vulnerability Details CVE-2016-8511
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.205
EPSS Ranking 95.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://www.securityfocus.com/bid/94610
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849
- https://www.tenable.com/security/research/tra-2016-39
- http://www.securityfocus.com/bid/94610
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849
- https://www.tenable.com/security/research/tra-2016-39
Products affected by CVE-2016-8511
-
cpe:2.3:a:hp:network_automation:10.00
-
cpe:2.3:a:hp:network_automation:10.00.01
-
cpe:2.3:a:hp:network_automation:10.00.02
-
cpe:2.3:a:hp:network_automation:10.10
-
cpe:2.3:a:hp:network_automation:10.11
-
cpe:2.3:a:hp:network_automation:10.11.01
-
cpe:2.3:a:hp:network_automation:10.20
-
cpe:2.3:a:hp:network_automation:9.10
-
cpe:2.3:a:hp:network_automation:9.20
-
cpe:2.3:a:hp:network_automation:9.22
-
cpe:2.3:a:hp:network_automation:9.22.01
-
cpe:2.3:a:hp:network_automation:9.22.02