Remote Code Execution in HP Network Node Manager Software
CVE-2016-4398

8.8HIGH

Key Information:

Vendor

HP
Status
HP Network Node Manager (nnmi)
Vendor
CVE Published:
6 August 2018

What is CVE-2016-4398?

A vulnerability has been detected in HP Network Node Manager i (NNMi) software that allows remote attackers to execute arbitrary code via malicious input processed through Java Deserialization. This issue affects specific versions and can lead to serious security risks if not addressed urgently.

Affected Version(s)

HP Network Node Manager (NNMi) 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10

References

http://www.securityfocus.com/bid/94195
vdb-entryx_refsource_BID
https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.