What is the CVSS score of CVE-2015-5367?

CVE-2015-5367 has a CVSS 2.0 base score of 6.9 (Medium). CVSS vector: AV:L/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.1%.

Hspa Gobi 4G CVE-2015-5367

MEDIUM

Permissions, Privileges, and Access Controls (CWE-264)

2015-08-27 cve@mitre.org

HP Privilege Escalation Hspa Gobi 4G Lt4112 Lte Elite X2 1010 G2 Elitebook 1040 G1 Elitebook 1040 G2 Elitebook 820 G1 Elitebook 820 G2 Elitebook 825 G2 Elitebook 840 G1 Elitebook 840 G2 Elitebook 845 G1 Elitebook 850 G1 Elitebook 850 G2 Elitebook 855 G1 Elitebook Folio 9470M Elitebook Revolve 810 G1 Elitebook Revolve 810 G2 Elitepad 1000 G2 Mt41 Thin Client Probook 430 G1 Probook 430 G2 Probook 440 G0 Probook 440 G1 Probook 440 G2 Probook 450 G0 Probook 450 G1 Probook 450 G2 Probook 640 G1 Probook 645 G1 Probook 650 G1 Probook 655 G1 Probook X2 620 G1 Spectre X2 13 Smb Pro Zbook 14 Zbook 14 G2 Zbook 15 Zbook 15 G2 Zbook 15U Zbook 17 G2

6.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 27, 2015 - 15:59 cve.org

MEDIUM 6.9

DescriptionCVE.org

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local users to gain privileges via unspecified vectors.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-264. The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local users to gain privileges via unspecified vectors. Affected products include: Hp Hspa\+ Gobi 4G, Hp Lt4112 Lte, Hp Elite X2 1010 G2, Hp Elitebook 1040 G1, Hp Elitebook 1040 G2. Version information: before 12.500.00.15.1803.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.