« Volver al listado

CVE-2016-2246

Estado: ModificadaAlta (7.8)—

HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Thinpro

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-2246",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-12-29T09:59:00.133",
  "references": [
    {
      "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05291676",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/93904",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05291676",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/93904",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "HP ThinPro 4.4 hasta la versión 6.1 no maneja adecuadamente el panel de control de diseño de teclado y la aplicación de teclado virtual, lo que permite a usuarios locales eludir las restricciones destinadas al acceso y obtener privilegios a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:43:43.433",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:thinpro:4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B3E8CB9-C977-4B86-8984-5F7585434EEC"
            },
            {
              "criteria": "cpe:2.3:o:hp:thinpro:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78A43F43-940D-4DF3-8DBF-36B8334828EA"
            },
            {
              "criteria": "cpe:2.3:o:hp:thinpro:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "517F75B9-02A2-4085-8856-DBDA2FBF0526"
            },
            {
              "criteria": "cpe:2.3:o:hp:thinpro:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E93AA95-2DB8-4DAD-B2B7-3A434B8AC8BE"
            },
            {
              "criteria": "cpe:2.3:o:hp:thinpro:5.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8252B8D-6743-4F8D-AAAD-65B1C637A56C"
            },
            {
              "criteria": "cpe:2.3:o:hp:thinpro:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F1947C6-A708-4A18-85B8-C964C1832433"
            },
            {
              "criteria": "cpe:2.3:o:hp:thinpro:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBC121F9-D429-4E58-B486-2C6441826A1B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}