Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-5367


The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local users to gain privileges via unspecified vectors.


Security Impact Summary

CVE-2015-5367 is a security vulnerability that . Impacting 39 products from hp, from hp, from hp and 36 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2015, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2015-08-27T15:59:00.140

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.9 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.4

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-264

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hp hspa\+_gobi_4g 12.500.00.15.1802 Yes
Application hp lt4112_lte 12.500.00.15.1802 Yes
Hardware hp elite_x2_1010_g2 * Yes
Hardware hp elitebook_1040_g1 * Yes
Hardware hp elitebook_1040_g2 * Yes
Hardware hp elitebook_820_g1 * Yes
Hardware hp elitebook_820_g2 * Yes
Hardware hp elitebook_825_g2 * Yes
Hardware hp elitebook_840_g1 * Yes
Hardware hp elitebook_840_g2 * Yes
Hardware hp elitebook_845_g1 * Yes
Hardware hp elitebook_850_g1 * Yes
Hardware hp elitebook_850_g2 * Yes
Hardware hp elitebook_855_g1 * Yes
Hardware hp elitebook_folio_9470m * Yes
Hardware hp elitebook_revolve_810_g1 * Yes
Hardware hp elitebook_revolve_810_g2 * Yes
Hardware hp elitepad_1000_g2 * Yes
Hardware hp mt41_thin_client * Yes
Hardware hp probook_430_g1 * Yes
Hardware hp probook_430_g2 * Yes
Hardware hp probook_440_g0 * Yes
Hardware hp probook_440_g1 * Yes
Hardware hp probook_440_g2 * Yes
Hardware hp probook_450_g0 * Yes
Hardware hp probook_450_g1 * Yes
Hardware hp probook_450_g2 * Yes
Hardware hp probook_640_g1 * Yes
Hardware hp probook_645_g1 * Yes
Hardware hp probook_650_g1 * Yes
Hardware hp probook_655_g1 * Yes
Hardware hp probook_x2_620_g1 * Yes
Hardware hp spectre_x2_13-smb_pro * Yes
Hardware hp zbook_14 * Yes
Hardware hp zbook_14_g2 * Yes
Hardware hp zbook_15 * Yes
Hardware hp zbook_15_g2 * Yes
Hardware hp zbook_15u * Yes
Hardware hp zbook_17_g2 * Yes

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For hp's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.