CVE-2015-5442 : Unspecified vulnerability in HP Software Update before 5.005.002.002 allows loca

Unspecified vulnerability in HP Software Update before 5.005.002.002 allows local users to gain privileges via unknown vectors.

Published 2015-09-29 18:59:03

Updated 2016-12-08 03:10:04

Source HP Inc.

View at NVD, CVE.org

Products affected by CVE-2015-5442

HP » Software Update
Versions up to, including, (<=) 5.0
cpe:2.3:a:hp:software_update:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04801217

HPSBGN03514 rev.1 - HP Software Update, Local Gain Privileged Access
Vendor Advisory
http://www.securitytracker.com/id/1033616

HP Software Update Unspecified Flaw Lets Local Users Gain Elevated Privileges - SecurityTracker

Jump to