First published: Mon Nov 28 2016(Updated: )
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.
Credit: security-alert@hpe.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP Network Automation | =9.10 | |
HP Network Automation | =9.20 | |
HP Network Automation | =9.22 | |
HP Network Automation | =9.22.01 | |
HP Network Automation | =9.22.02 | |
HP Network Automation | =10.00 | |
HP Network Automation | =10.00.01 | |
HP Network Automation | =10.00.02 | |
HP Network Automation | =10.10 | |
HP Network Automation | =10.11 | |
HP Network Automation | =10.11.01 | |
HP Network Automation | =10.20 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-8511 has a high severity rating due to its potential for remote code execution.
To fix CVE-2016-8511, update HPE Network Automation to the latest patched version available.
CVE-2016-8511 affects HPE Network Automation versions 9.1x to 10.20.
Yes, CVE-2016-8511 can be exploited remotely, allowing attackers to execute arbitrary code.
CVE-2016-8511 is associated with remote code execution attacks through Java deserialization.