CVE-2015-2114 HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors.

MediumCVSS 6.8 EPSS 3.5%

Published: 2015-04-15 01:00
Updated: 2026-06-17 03:23
Exploit status: No public exploit known

Description

HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors.

Affected products

Product	Affected versions	Fixed in
HP Inc support solution framework	<= 11.51.0027	No fix listed

References

74054 vdb-entry
HPSBGN03316 vendor-advisory

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.54% (percentile 89.5)
CWE: CWE-254

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.