PT-2016-5923 · Hewlett Packard+1 · Power Advisor+17

Published 2016-08-22 · Updated 2016-11-28 · CVE-2016-4377

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Smart Update in Storage Sizing Tool versions prior to 13.0 Converged Infrastructure Solution Sizer Suite (CISSS) versions prior to 2.13.1 Power Advisor versions prior to 7.8.2 Insight Management Sizer versions prior to 16.12.1 Synergy Planning Tool versions prior to 3.3 SAP Sizing Tool versions prior to 16.12.1 Sizing Tool for SAP Business Suite powered by HANA versions prior to 16.11.1 Sizer for ConvergedSystems Virtualization versions prior to 16.7.1 Sizer for Microsoft Exchange Server versions prior to 16.12.1 Sizer for Microsoft Lync Server 2013 versions prior to 16.12.1 Sizer for Microsoft SharePoint 2013 versions prior to 16.13.1 Sizer for Microsoft SharePoint 2010 versions prior to 16.11.1 Sizer for Microsoft Skype for Business Server 2015 versions prior to 16.5.1

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For HPE Smart Update in Storage Sizing Tool, update to version 13.0 or later. For Converged Infrastructure Solution Sizer Suite (CISSS), update to version 2.13.1 or later. For Power Advisor, update to version 7.8.2 or later. For Insight Management Sizer, update to version 16.12.1 or later. For Synergy Planning Tool, update to version 3.3 or later. For SAP Sizing Tool, update to version 16.12.1 or later. For Sizing Tool for SAP Business Suite powered by HANA, update to version 16.11.1 or later. For Sizer for ConvergedSystems Virtualization, update to version 16.7.1 or later. For Sizer for Microsoft Exchange Server, update to version 16.12.1 or later. For Sizer for Microsoft Lync Server 2013, update to version 16.12.1 or later. For Sizer for Microsoft SharePoint 2013, update to version 16.13.1 or later. For Sizer for Microsoft SharePoint 2010, update to version 16.11.1 or later. For Sizer for Microsoft Skype for Business Server 2015, update to version 16.5.1 or later.

Fix

Related Identifiers

CVE-2016-4377

Affected Products

Converged Infrastructure Solution Sizer Suite

Hpe Smart Update

Insight Management Sizer

Exchange Server

Lync Server 2013

Sharepoint 2010

Sharepoint 2013

Skype For Business Server 2015

Power Advisor

Sap Sizing Tool

Sizer For Convergedsystems Virtualization

Sizer For Microsoft Exchange Server

Sizer For Microsoft Lync Server 2013

Sizer For Microsoft Sharepoint 2010

Sizer For Microsoft Sharepoint 2013

Sizer For Microsoft Skype For Business Server 2015

Sizing Tool For Sap Business Suite Powered By Hana

Synergy Planning Tool

References · 4

• https://osv.dev/vulnerability/CVE-2016-4377 · Vendor Advisory
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05237578 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4377 · Security Note
• http://securityfocus.com/bid/92479 · Note