Vulnerability-Lookup

CNVD-2016-11840

Vulnerability from cnvd - Published: 2016-12-05

Title

HP Network Automation远程代码执行漏洞

Description

HP Network Automation是美国惠普（HP）公司的一套自动化网络配置管理工具。该工具能对分布广泛的多厂商网络设备进行自动化的配置变更、软件更新、合规审计以及跟踪和控制。 HP Network Automation中存在远程代码执行漏洞。攻击者可利用该漏洞在受影响应用程序上执行任意代码。

Severity

高

Patch Name

HP Network Automation远程代码执行漏洞的补丁

Patch Description

HP Network Automation是美国惠普（HP）公司的一套自动化网络配置管理工具。该工具能对分布广泛的多厂商网络设备进行自动化的配置变更、软件更新、合规审计以及跟踪和控制。 HP Network Automation中存在远程代码执行漏洞。攻击者可利用该漏洞在受影响应用程序上执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849

Reference

http://www.securityfocus.com/bid/94610

Impacted products

Name
['HP Network Automation 9.10', 'HP Network Automation 9.20', 'HP Network Automation 10.00.01', 'HP HPE Network Automation 9.22', 'HP Network Automation 9.10.2', 'HP Network Automation 9.2', 'HP Network Automation 10.0', 'HP Network Automation 10.10', 'HP Network Automation 10.11.1', 'HP Network Automation 10.20', 'HP Network Automation 10.11', 'HP Network Automation 10.00.02']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "94610"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-8511"
    }
  },
  "description": "HP Network Automation\u662f\u7f8e\u56fd\u60e0\u666e\uff08HP\uff09\u516c\u53f8\u7684\u4e00\u5957\u81ea\u52a8\u5316\u7f51\u7edc\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\u3002\u8be5\u5de5\u5177\u80fd\u5bf9\u5206\u5e03\u5e7f\u6cdb\u7684\u591a\u5382\u5546\u7f51\u7edc\u8bbe\u5907\u8fdb\u884c\u81ea\u52a8\u5316\u7684\u914d\u7f6e\u53d8\u66f4\u3001\u8f6f\u4ef6\u66f4\u65b0\u3001\u5408\u89c4\u5ba1\u8ba1\u4ee5\u53ca\u8ddf\u8e2a\u548c\u63a7\u5236\u3002\r\n\r\nHP Network Automation\u4e2d\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u5e94\u7528\u7a0b\u5e8f\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Jacob Baines - Tenable Network Security",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-11840",
  "openTime": "2016-12-05",
  "patchDescription": "HP Network Automation\u662f\u7f8e\u56fd\u60e0\u666e\uff08HP\uff09\u516c\u53f8\u7684\u4e00\u5957\u81ea\u52a8\u5316\u7f51\u7edc\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\u3002\u8be5\u5de5\u5177\u80fd\u5bf9\u5206\u5e03\u5e7f\u6cdb\u7684\u591a\u5382\u5546\u7f51\u7edc\u8bbe\u5907\u8fdb\u884c\u81ea\u52a8\u5316\u7684\u914d\u7f6e\u53d8\u66f4\u3001\u8f6f\u4ef6\u66f4\u65b0\u3001\u5408\u89c4\u5ba1\u8ba1\u4ee5\u53ca\u8ddf\u8e2a\u548c\u63a7\u5236\u3002\r\n\r\nHP Network Automation\u4e2d\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u5e94\u7528\u7a0b\u5e8f\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "HP Network Automation\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "HP Network Automation 9.10",
      "HP Network Automation 9.20",
      "HP Network Automation 10.00.01",
      "HP HPE Network Automation 9.22",
      "HP Network Automation 9.10.2",
      "HP Network Automation  9.2",
      "HP Network Automation  10.0",
      "HP Network Automation 10.10",
      "HP Network Automation 10.11.1",
      "HP Network Automation  10.20",
      "HP Network Automation  10.11",
      "HP Network Automation  10.00.02"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/94610",
  "serverity": "\u9ad8",
  "submitTime": "2016-12-02",
  "title": "HP Network Automation\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2016-8511 (GCVE-0-2016-8511)

Vulnerability from cvelistv5 – Published: 2018-02-15 22:00 – Updated: 2024-09-16 20:17

Summary

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.

Severity ?

No CVSS data available.

CWE

Remote Code Execution

Assigner

hpe

References

URL

Tags

	https://www.tenable.com/security/research/tra-2016-39	x_refsource_MISC
	https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94610	vdb-entryx_refsource_BID

Impacted products

	Vendor	Product	Version
	Hewlett Packard Enterprise	Network Automation	Affected: v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:40.195Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2016-39"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849"
          },
          {
            "name": "94610",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94610"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Network Automation",
          "vendor": "Hewlett Packard Enterprise",
          "versions": [
            {
              "status": "affected",
              "version": "v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20"
            }
          ]
        }
      ],
      "datePublic": "2016-11-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Remote Code Execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-16T10:57:01",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.tenable.com/security/research/tra-2016-39"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849"
        },
        {
          "name": "94610",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94610"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-alert@hpe.com",
          "DATE_PUBLIC": "2016-11-28T00:00:00",
          "ID": "CVE-2016-8511",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Network Automation",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Hewlett Packard Enterprise"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Remote Code Execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.tenable.com/security/research/tra-2016-39",
              "refsource": "MISC",
              "url": "https://www.tenable.com/security/research/tra-2016-39"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05344849"
            },
            {
              "name": "94610",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94610"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2016-8511",
    "datePublished": "2018-02-15T22:00:00Z",
    "dateReserved": "2016-10-07T00:00:00",
    "dateUpdated": "2024-09-16T20:17:43.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2016-11840

CVE-2016-8511 (GCVE-0-2016-8511)

Tags

Sightings

Nomenclature