What is the CVSS score of CVE-2015-5368?

CVE-2015-5368 has a CVSS 2.0 base score of 7.8 (High). CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:C. EPSS exploitation probability: 2.8%.

Hspa Gobi 4G CVE-2015-5368

HIGH

Buffer Overflow (CWE-119)

2015-08-27 cve@mitre.org

Denial Of Service HP Buffer Overflow RCE Hspa Gobi 4G Lt4112 Lte Elite X2 1010 G2 Elitebook 1040 G1 Elitebook 1040 G2 Elitebook 820 G1 Elitebook 820 G2 Elitebook 825 G2 Elitebook 840 G1 Elitebook 840 G2 Elitebook 845 G1 Elitebook 850 G1 Elitebook 850 G2 Elitebook 855 G1 Elitebook Folio 9470M Elitebook Revolve 810 G1 Elitebook Revolve 810 G2 Elitepad 1000 G2 Mt41 Thin Client Probook 430 G1 Probook 430 G2 Probook 440 G0 Probook 440 G1 Probook 440 G2 Probook 450 G0 Probook 450 G1 Probook 450 G2 Probook 640 G1 Probook 645 G1 Probook 650 G1 Probook 655 G1 Probook X2 620 G1 Spectre X2 13 Smb Pro Zbook 14 Zbook 14 G2 Zbook 15 Zbook 15 G2 Zbook 15U Zbook 17 G2

7.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:N/AC:M/Au:N/C:N/I:P/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:P/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

None

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 27, 2015 - 15:59 cve.org

HIGH 7.8

DescriptionCVE.org

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors.

AnalysisAI

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors. Affected products include: Hp Hspa\+ Gobi 4G, Hp Lt4112 Lte, Hp Elite X2 1010 G2, Hp Elitebook 1040 G1, Hp Elitebook 1040 G2. Version information: before 12.500.00.15.1803.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.