VYPR
← All advisories
High severity7.3NVD Advisory· Published Sep 29, 2016· Updated Jun 17, 2026

CVE-2016-4385

CVE-2016-4385

Description

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Microfocus/Network Automation11 versions
    cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:hp:network_automation:10.00:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:10.00.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:10.00.02:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:10.10:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:10.11:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:9.10:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:9.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:9.22:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:9.22.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:network_automation:9.22.02:*:*:*:*:*:*:*
    • (no CPE)range: <10.00.02.01, <10.11.00.01

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.