Critical severity · published Aug 6, 2018
CVE-2016-4402
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2
9.8
CVSS
14.7%
EPSS
No
On KEV
Description
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)14.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HK
HP Keyview · Hewlett Packard Enterprise
earlier than v11.2 · source: vendor
KE
Keyview · HP
before 11.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4402
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4402
Third Party Advisory
http://www.securityfocus.com/bid/94184
Third Party Advisory
http://www.securitytracker.com/id/1037235
Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325836
More from HP Keyview
9.8
CVE-2016-4403
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2
9.8
CVE-2016-4404
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2