PT-2019-12626 · Hewlett Packard · Hpe Uiot

Published 2019-12-18 · Updated 2020-08-24 · CVE-2019-11995

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE UIoT versions prior to 1.2.4.2 RP3 HF1

Description The issue allows unauthorized remote access and access to sensitive data.

Recommendations For versions 1.2.4.2, apply the fixes made available with 1.2.4.2 RP3 HF1. For versions older than 1.2.4.2, such as 1.2.4.1, 1.2.4.0, upgrade to 1.2.4.2 RP3 HF1.

Fix

Related Identifiers

CVE-2019-11995

Affected Products

Hpe Uiot

References · 3

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03954en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11995 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11995 · Vendor Advisory