CVE-2016-4385 | BDVDB-2026-78415 Detail

Description#

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05279098
http://www.zerodayinitiative.com/advisories/ZDI-16-523/
https://www.tenable.com/security/research/tra-2016-27
http://www.securityfocus.com/bid/93109

Exploit#

No public exploit known

History#

Version 12016-09-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.