PT-2015-6874 · Hewlett Packard · Elite+7

Published 2015-08-27 · Updated 2017-09-20 · CVE-2015-5368

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions HP lt4112 LTE/HSPA+ Gobi 4G module versions prior to 12.500.00.15.1803

Description The issue allows remote attackers to modify data, cause a denial of service, or execute arbitrary code via unspecified vectors. This affects various HP devices, including EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices.

Recommendations For HP lt4112 LTE/HSPA+ Gobi 4G module versions prior to 12.500.00.15.1803, update the firmware to version 12.500.00.15.1803 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-5368

Affected Products

Elite

Elitebook

Elitepad

Hp Lt4112 Lte/Hspa+ Gobi 4G Module

Probook

Spectre

Zbook

Mt41 Thin Client

References · 6

• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5368 · Security Note
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 · Vendor Advisory
• http://securityfocus.com/bid/76176 · Note
• http://securitytracker.com/id/1033414 · Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm · Note