Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-4377

HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered by HANA before 16.11.1, Sizer for ConvergedSystems Virtualization before 16.7.1, Sizer for Microsoft Exchange Server before 16.12.1, Sizer for Microsoft Lync Server 2013 before 16.12.1, Sizer for Microsoft SharePoint 2013 before 16.13.1, Sizer for Microsoft SharePoint 2010 before 16.11.1, and Sizer for Microsoft Skype for Business Server 2015 before 16.5.1 allows remote attackers to execute arbitrary code via unspecified vectors.

Published

2016-08-22T10:59:06.713

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 8.1 (HIGH)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

4.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hp converged_infrastructure_solution_sizer_suite ≤ 2.13.0 Yes
Application hp insight_management_sizer ≤ 16.12.0 Yes
Application hp power_advisor ≤ 7.8.1 Yes
Application hp sap_sizing_tool ≤ 16.12.0 Yes
Application hp sizer_for_converged_systems_virtualization ≤ 16.7.0 Yes
Application hp sizer_for_microsoft_exchange_server_2010 ≤ 16.12.0 Yes
Application hp sizer_for_microsoft_exchange_server_2013 ≤ 16.12.0 Yes
Application hp sizer_for_microsoft_exchange_server_2016 ≤ 16.12.0 Yes
Application hp sizer_for_microsoft_lync_server_2013 ≤ 16.12.0 Yes
Application hp sizer_for_microsoft_sharepoint_2010 ≤ 16.11.0 Yes
Application hp sizer_for_microsoft_sharepoint_2013 ≤ 16.13.0 Yes
Application hp sizer_for_microsoft_skype_for_business_server_2015 ≤ 16.5.0 Yes
Application hp sizing_tool_for_sap_business_suite_powered_by_hana ≤ 16.11.0 Yes
Application hp storage_sizing_tool ≤ 13.0 Yes
Application hp synergy_planning_tool ≤ 3.2 Yes
References