« Volver al listado

CVE-2011-4790

Estado: ModificadaAlta (9.3)—

Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Network Automation

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-4790",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-02-02T00:55:01.190",
  "references": [
    {
      "url": "http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03171149",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://secunia.com/advisories/47738",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://secunia.com/advisories/47826",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://securitytracker.com/id?1026601",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03171149",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/47738",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/47826",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1026601",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en HP Network Automation v7.5x, v7.6x, v9.0, y v9.10, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:35:25.163",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:network_automation:7.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12FA3FDA-477E-4502-AD45-A912852605D7"
            },
            {
              "criteria": "cpe:2.3:a:hp:network_automation:7.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B84C3BA0-6C8A-4C3D-BB47-8FB930540DF4"
            },
            {
              "criteria": "cpe:2.3:a:hp:network_automation:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B927D599-67CE-4E31-86A4-32052622E098"
            },
            {
              "criteria": "cpe:2.3:a:hp:network_automation:9.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB242214-2612-474E-96E2-DFD9CBE05454"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com",
  "evaluatorSolution": "Per: http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03171149&ac.admitted=1328201924080.876444892.492883150\r\n\r\n'RESOLUTION\r\n\r\nHP has provided a patch to resolve the vulnerability for HP Network Automation v9.10. The patch is available here: http://support.openview.hp.com/selfsolve/patches\r\n\r\n   1. Upgrade to HP Network Automation v9.10\r\n   2. Apply patch 2 or subsequent (Network Automation 09.10.02, NA_00015)'"
}