Skip to main content

Network Automation CVE-2016-4386

HIGH
2016-09-29 cve@mitre.org
Information Disclosure Network Automation
7.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 29, 2016 - 14:59 cve.org
HIGH 7.8

DescriptionCVE.org

HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.

AnalysisAI

HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors. Affected products include: Hp Network Automation.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Network Automation

View all
CVE-2016-1989 CRITICAL
9.8 Mar 15

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code o
CVE-2016-1988 CRITICAL
9.8 Mar 15

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code o
CVE-2019-3493 HIGH
8.8 Apr 29

A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.
CVE-2018-6493 HIGH
8.8 May 22

SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation,
CVE-2016-4385 HIGH
7.3 Sep 29

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 all
CVE-2014-2646 HIGH
7.2 Oct 10

Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictio
CVE-2021-38123 MEDIUM
6.1 Sep 07

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.
CVE-2018-6492 MEDIUM
6.1 May 22

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2016-4386 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy