CVE-2015-5367

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local users to gain privileges via unspecified vectors.

CVSS v2.0 6.9 MEDIUM

6.9^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 3.4 / Impact : 10.0

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/76171
http://www.securitytracker.com/id/1033414
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272	Vendor Advisory
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272
http://www.securityfocus.com/bid/76171
http://www.securitytracker.com/id/1033414
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272	Vendor Advisory
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:hp:hspa\+_gobi_4g:12.500.00.15.1802:::::::*
	cpe:2.3:a:hp:lt4112_lte:12.500.00.15.1802:::::::*

OR	cpe:2.3:h:hp:elite_x2_1010_g2::::::::
	cpe:2.3:h:hp:elitebook_1040_g1::::::::
	cpe:2.3:h:hp:elitebook_1040_g2::::::::
	cpe:2.3:h:hp:elitebook_820_g1::::::::
	cpe:2.3:h:hp:elitebook_820_g2::::::::
	cpe:2.3:h:hp:elitebook_825_g2::::::::
	cpe:2.3:h:hp:elitebook_840_g1::::::::
	cpe:2.3:h:hp:elitebook_840_g2::::::::
	cpe:2.3:h:hp:elitebook_845_g1::::::::
	cpe:2.3:h:hp:elitebook_850_g1::::::::
	cpe:2.3:h:hp:elitebook_850_g2::::::::
	cpe:2.3:h:hp:elitebook_855_g1::::::::
	cpe:2.3:h:hp:elitebook_folio_9470m::::::::
	cpe:2.3:h:hp:elitebook_revolve_810_g1::::::::
	cpe:2.3:h:hp:elitebook_revolve_810_g2::::::::
	cpe:2.3:h:hp:elitepad_1000_g2::::::::
	cpe:2.3:h:hp:mt41_thin_client::::::::
	cpe:2.3:h:hp:probook_430_g1::::::::
	cpe:2.3:h:hp:probook_430_g2::::::::
	cpe:2.3:h:hp:probook_440_g0::::::::
	cpe:2.3:h:hp:probook_440_g1::::::::
	cpe:2.3:h:hp:probook_440_g2::::::::
	cpe:2.3:h:hp:probook_450_g0::::::::
	cpe:2.3:h:hp:probook_450_g1::::::::
	cpe:2.3:h:hp:probook_450_g2::::::::
	cpe:2.3:h:hp:probook_640_g1::::::::
	cpe:2.3:h:hp:probook_645_g1::::::::
	cpe:2.3:h:hp:probook_650_g1::::::::
	cpe:2.3:h:hp:probook_655_g1::::::::
	cpe:2.3:h:hp:probook_x2_620_g1::::::::
	cpe:2.3:h:hp:spectre_x2_13-smb_pro::::::::
	cpe:2.3:h:hp:zbook_14::::::::
	cpe:2.3:h:hp:zbook_14_g2::::::::
	cpe:2.3:h:hp:zbook_15::::::::
	cpe:2.3:h:hp:zbook_15_g2::::::::
	cpe:2.3:h:hp:zbook_15u::::::::
	cpe:2.3:h:hp:zbook_17_g2::::::::

History

21 Nov 2024, 02:32

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/76171 -~~	() http://www.securityfocus.com/bid/76171 -
References	~~() http://www.securitytracker.com/id/1033414 -~~	() http://www.securitytracker.com/id/1033414 -
References	~~() http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm -~~	() http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm -
References	~~() https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 - Vendor Advisory~~	() https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 - Vendor Advisory
References	~~() https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 -~~	() https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 -

Information

Published : 2015-08-27 15:59

Updated : 2024-11-21 02:32

NVD link : CVE-2015-5367

Mitre link : CVE-2015-5367

CVE.ORG link : CVE-2015-5367

JSON object : View

Products Affected

zbook_17_g2
elitepad_1000_g2
probook_450_g2
probook_650_g1
probook_440_g1
probook_440_g2
probook_655_g1
probook_640_g1
zbook_15
probook_450_g1
elitebook_845_g1
zbook_14
elitebook_840_g2
elitebook_folio_9470m
mt41_thin_client
elitebook_840_g1
elitebook_855_g1
zbook_14_g2
elitebook_850_g1
elitebook_revolve_810_g2
probook_430_g1
elitebook_825_g2
probook_430_g2
lt4112_lte
zbook_15_g2
hspa\+_gobi_4g
elitebook_820_g1
elitebook_820_g2
elite_x2_1010_g2
probook_440_g0
elitebook_1040_g2
elitebook_850_g2
probook_450_g0
zbook_15u
elitebook_1040_g1
probook_645_g1
elitebook_revolve_810_g1
spectre_x2_13-smb_pro
probook_x2_620_g1

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-5367", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-08-27T15:59:00.140", "references": [{"url": "http://www.securityfocus.com/bid/76171", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1033414", "source": "cve@mitre.org"}, {"url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm", "source": "cve@mitre.org"}, {"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/76171", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1033414", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local users to gain privileges via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad en el m\u00f3dulo HP lt4112 LTE/HSPA+ Gobi 4G con firmware anterior a 12.500.00.15.1803 en dispositivos Thin Client EliteBook, ElitePad, Elite, ProBook, Spectre, Zbook y mt4, permite a usuarios locales obtener privilegios a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T02:32:53.530", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:hspa\\+_gobi_4g:12.500.00.15.1802:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E2157AC-911C-478C-B0D3-A38B801CA395"}, {"criteria": "cpe:2.3:a:hp:lt4112_lte:12.500.00.15.1802:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C187ABC9-0E73-46F6-A66B-1808DFD284FF"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp:elite_x2_1010_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8919E81-BECF-4DD7-A999-E2EB66DEEAE4"}, {"criteria": "cpe:2.3:h:hp:elitebook_1040_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2BB90C2-68A9-490C-8F14-82EC22B964C2"}, {"criteria": "cpe:2.3:h:hp:elitebook_1040_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6F92AB1-67A0-4581-800B-6B17E2265B6E"}, {"criteria": "cpe:2.3:h:hp:elitebook_820_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC404B1D-897C-48E8-95CE-78E38A0E31C6"}, {"criteria": "cpe:2.3:h:hp:elitebook_820_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7A5E00E-5EDA-4A9D-B35B-2B570D64E036"}, {"criteria": "cpe:2.3:h:hp:elitebook_825_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD81C051-3DD3-40FB-8962-067F6C59D90A"}, {"criteria": "cpe:2.3:h:hp:elitebook_840_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01FF3490-EE31-47C6-A040-F119AA781FDE"}, {"criteria": "cpe:2.3:h:hp:elitebook_840_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AE1405F-70C8-47E3-B7BE-D5AB01145F1A"}, {"criteria": "cpe:2.3:h:hp:elitebook_845_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "625506BA-69E5-4D0E-89E4-DFC046D95C7C"}, {"criteria": "cpe:2.3:h:hp:elitebook_850_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1748791-C1A2-4937-8F92-073E81931933"}, {"criteria": "cpe:2.3:h:hp:elitebook_850_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F95B2767-84AF-41F8-9319-527744725FCC"}, {"criteria": "cpe:2.3:h:hp:elitebook_855_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEAE0B72-378B-45C9-8435-3561E20D861E"}, {"criteria": "cpe:2.3:h:hp:elitebook_folio_9470m:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A317BABE-B669-4482-A847-3CB6694BD2DA"}, {"criteria": "cpe:2.3:h:hp:elitebook_revolve_810_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A34EB5CA-4832-4CFB-84E5-52B0AB5A22C8"}, {"criteria": "cpe:2.3:h:hp:elitebook_revolve_810_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4BA3B03-8DAD-4F47-8FDB-82F12600745A"}, {"criteria": "cpe:2.3:h:hp:elitepad_1000_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9489A208-4CB2-43BE-B3FD-BE197B920B58"}, {"criteria": "cpe:2.3:h:hp:mt41_thin_client:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F19DFC10-3D12-4A2C-926C-F272214764B0"}, {"criteria": "cpe:2.3:h:hp:probook_430_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4157E961-CDE4-4248-8567-772285BDCE08"}, {"criteria": "cpe:2.3:h:hp:probook_430_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "518ACF4F-68DC-4552-BB5D-29D1806E1049"}, {"criteria": "cpe:2.3:h:hp:probook_440_g0:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87A84BA2-A454-471D-8CC1-5D223943FE25"}, {"criteria": "cpe:2.3:h:hp:probook_440_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FD3B5B7-7BB1-43FF-B83F-A9E648685A25"}, {"criteria": "cpe:2.3:h:hp:probook_440_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68821AB4-9568-413D-B634-A8AB4A547437"}, {"criteria": "cpe:2.3:h:hp:probook_450_g0:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EB611EB-61A2-49BE-B8D3-5F5B5053907E"}, {"criteria": "cpe:2.3:h:hp:probook_450_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A7ABC6B-25BB-431A-9D8C-D9A66F24EA36"}, {"criteria": "cpe:2.3:h:hp:probook_450_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98E4D80E-BE04-40E1-A1B7-EEEEE5F9D5B3"}, {"criteria": "cpe:2.3:h:hp:probook_640_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCF356BC-AEC9-46CB-A269-204FED58B273"}, {"criteria": "cpe:2.3:h:hp:probook_645_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A2E83F9-91ED-4997-A96C-2C1BCEF03B2B"}, {"criteria": "cpe:2.3:h:hp:probook_650_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C9E1813-76B9-48D8-8481-A3021BB5EEA1"}, {"criteria": "cpe:2.3:h:hp:probook_655_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6FB98F1-1007-48DD-A83A-6BA361B1D301"}, {"criteria": "cpe:2.3:h:hp:probook_x2_620_g1:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42684BEA-80BB-4A5C-B441-896D9384F899"}, {"criteria": "cpe:2.3:h:hp:spectre_x2_13-smb_pro:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3474A823-C215-4481-BD13-D5E078D83EC0"}, {"criteria": "cpe:2.3:h:hp:zbook_14:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "631179C2-0607-480E-B42F-65BAA8FDC10E"}, {"criteria": "cpe:2.3:h:hp:zbook_14_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4D29574-2555-4079-A2D4-4E92AD4F0B63"}, {"criteria": "cpe:2.3:h:hp:zbook_15:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37620210-0FAE-46B0-AA72-7E56A8FD8EB9"}, {"criteria": "cpe:2.3:h:hp:zbook_15_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "006560A7-B052-493E-A0AF-69E387BB82D5"}, {"criteria": "cpe:2.3:h:hp:zbook_15u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EEDDA07-EDFA-4628-B524-77C4E8E9E514"}, {"criteria": "cpe:2.3:h:hp:zbook_17_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2483EDC-75D6-422F-AB6E-E5BCF0BB6F5C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

6.9 /10