PT-2016-1622 · Hewlett Packard · Hpe Network Switches

Published 2016-01-05 · Updated 2016-12-07 · CVE-2015-6859

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HPE Network Switches versions 15.16.x through 15.17.x

Description The issue is related to insufficient access control restrictions in the software of HPE Network Switches, allowing local users to bypass intended access restrictions.

Recommendations For versions 15.16.x through 15.17.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-00933

CVE-2015-6859

Affected Products

Hpe Network Switches

References · 5

• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6859 · Security Note
• https://bdu.fstec.ru/vul/2016-00933 · Security Note
• http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918 · Note
• http://securitytracker.com/id/1034410 · Note