PT-2016-4947 · Hewlett Packard · Hpe Network Automation

Published 2016-03-15 · Updated 2016-12-03 · CVE-2016-1989

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Network Automation versions 9.22 through 9.22.02 HPE Network Automation versions 10.x before 10.00.02

Description The issue allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors.

Recommendations For versions 9.22 through 9.22.02, update to a version outside of this range to resolve the issue. For versions 10.x before 10.00.02, update to version 10.00.02 or later to resolve the issue.

Fix

Related Identifiers

CVE-2016-1989

Affected Products

Hpe Network Automation

References · 4

• https://osv.dev/vulnerability/CVE-2016-1989 · Vendor Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05030906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1989 · Security Note
• http://securitytracker.com/id/1035192 · Note