CVE-2017-8974

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

15/02/2018

Last modified:

03/10/2019

Description

A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found.

Impact

Vector 3.x

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS v3.1 Severity and Metrics:

Base Score: 4.40 MEDIUM
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): Low
Integrity (I): Low
Availability (A): None

Base Score 3.x

4.40

Severity 3.x

MEDIUM

Vector 2.0

AV:L/AC:L/Au:N/C:P/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 3.60 LOW
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N

Attack Vector (AV): Local
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): None

Base Score 2.0

3.60

Severity 2.0

LOW

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:hp:nonstop_server_software::::::::	t6533h02 (including)	t6533h04\^adf (including)
cpe:2.3:a:hp:nonstop_server_software::::::::	t6533l01 (including)	t6533l01\^adn (including)
cpe:2.3:h:hp:nonstop_server:-:::::::*

To consult the complete list of CPE names with products and versions, see this page

CVE-2017-8974

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools