HPE ConvergedSystem 700 2.0 VMware Kit Remote Privilege Escalation (CVE-2016-5195/7457)

--- Vulnerability Overview Document ID: HPESBGN03707 rev.1 Title: HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege Potential Security Impact: Remote: Privilege Escalation Source: Hewlett Packard Enterprise, HPE Product Security Response Team Vulnerability Summary HPE has identified two VMware security advisories affecting the HPE ConvergedSystem 700 2.0 VMware Kit. These vulnerabilities can be exploited remotely to allow privilege escalation. Related CVEs: - CVE-2016-5195 - VMware vROps, VMSA-2016-0018.3 - CVE-2016-7457 - VMware vROps, VMSA-2016-0016.1 Affected Software Versions HP ConvergedSystem 700 1.0 or 1.1 – Customers using the June 2016 HPE ConvergedSystem 700 firmware and software compatibility matrix HP ConvergedSystem 700 Virtualization 2.0 VMware Kit 2.0 – Customers using the June 2016 HPE ConvergedSystem 700 firmware and software compatibility matrix CVSS Scores CVE-2016-5195: - V3 Base Score: 7.8 - V2 Base Score: 7.2 CVE-2016-7457: - V3 Base Score: 10.0 - V2 Base Score: 8.0 Remediation HPE recommends applying the following vROps patches: VMSA-2016-0016.1 VMSA-2016-0018.3 Reporting and Subscription Report Security Vulnerabilities: - Web Form: https://www.hpe.com/info/report-security-vulnerability - Email: security-alert@hpe.com Subscribe to Security Advisories: http://www.hpe.com/support/Subscriber_Choice --- This summary provides a quick overview of the key details regarding the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

HPE ConvergedSystem 700 2.0 VMware Kit Remote Privilege Escalation (CVE-2016-5195/7457)