CVE-2016-2246: High severity thin vulnerability
Published Dec 29, 2016
·Updated
HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors.
Affected Software
7 affected components
HP ThinPro=4.4
HP ThinPro=5.0
HP ThinPro=5.1
HP ThinPro=5.2
HP ThinPro=5.2.1
HP ThinPro=6.0
HP ThinPro=6.1
Remediation
Event History
Dec 29, 2016
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
Description
Frequently Asked Questions
1
What are the potential risks of CVE-2016-2246?
CVE-2016-2246 allows local users to bypass intended access restrictions, potentially leading to unauthorized privilege escalation.
2
What versions of HP ThinPro are affected by CVE-2016-2246?
HP ThinPro versions 4.4 through 6.1 are affected by CVE-2016-2246.
3
How do I mitigate CVE-2016-2246?
To mitigate CVE-2016-2246, ensure to apply the latest security patches or updates provided by HP for the affected ThinPro versions.
4
Is CVE-2016-2246 exploitable remotely?
No, CVE-2016-2246 is a local vulnerability that requires physical access to exploit.
5
What is the severity level of CVE-2016-2246?
CVE-2016-2246 has been classified with a medium severity level.