CVE-2015-5368

Summary

CVE	CVE-2015-5368
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2015-08-27 15:59:01 UTC
Updated	2026-05-06 22:30:45 UTC
Description	The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors.

Risk And Classification

Primary CVSS: v2.0 7.8 from [email protected]

AV:N/AC:M/Au:N/C:N/I:P/A:C

Problem Types: CWE-119 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

Complete

AV:N/AC:M/Au:N/C:N/I:P/A:C

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Hp	Elitebook 1040 G1	All	All	All	All
Hardware	Hp	Elitebook 1040 G2	All	All	All	All
Hardware	Hp	Elitebook 820 G1	All	All	All	All
Hardware	Hp	Elitebook 820 G2	All	All	All	All
Hardware	Hp	Elitebook 825 G2	All	All	All	All
Hardware	Hp	Elitebook 840 G1	All	All	All	All
Hardware	Hp	Elitebook 840 G2	All	All	All	All
Hardware	Hp	Elitebook 845 G1	All	All	All	All
Hardware	Hp	Elitebook 850 G1	All	All	All	All
Hardware	Hp	Elitebook 850 G2	All	All	All	All
Hardware	Hp	Elitebook 855 G1	All	All	All	All
Hardware	Hp	Elitebook Folio 9470m	All	All	All	All
Hardware	Hp	Elitebook Revolve 810 G1	All	All	All	All
Hardware	Hp	Elitebook Revolve 810 G2	All	All	All	All
Hardware	Hp	Elitepad 1000 G2	All	All	All	All
Hardware	Hp	Elite X2 1010 G2	All	All	All	All
Application	Hp	Hspa Gobi 4g	12.500.00.15.1802	All	All	All
Application	Hp	Lt4112 Lte	12.500.00.15.1802	All	All	All
Hardware	Hp	Mt41 Thin Client	All	All	All	All
Hardware	Hp	Probook 430 G1	All	All	All	All
Hardware	Hp	Probook 430 G2	All	All	All	All
Hardware	Hp	Probook 440 G0	All	All	All	All
Hardware	Hp	Probook 440 G1	All	All	All	All
Hardware	Hp	Probook 440 G2	All	All	All	All
Hardware	Hp	Probook 450 G0	All	All	All	All
Hardware	Hp	Probook 450 G1	All	All	All	All
Hardware	Hp	Probook 450 G2	All	All	All	All
Hardware	Hp	Probook 640 G1	All	All	All	All
Hardware	Hp	Probook 645 G1	All	All	All	All
Hardware	Hp	Probook 650 G1	All	All	All	All
Hardware	Hp	Probook 655 G1	All	All	All	All
Hardware	Hp	Probook X2 620 G1	All	All	All	All
Hardware	Hp	Spectre X2 13-smb Pro	All	All	All	All
Hardware	Hp	Zbook 14	All	All	All	All
Hardware	Hp	Zbook 14 G2	All	All	All	All
Hardware	Hp	Zbook 15	All	All	All	All
Hardware	Hp	Zbook 15u	All	All	All	All
Hardware	Hp	Zbook 15 G2	All	All	All	All
Hardware	Hp	Zbook 17 G2	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay	af854a3a-2127-422b-91ae-364da2661108	h20566.www2.hp.com
Security_Advisory-Two Security Vulnerabilities in the ME906 Wireless Module - Huawei PSIRT	af854a3a-2127-422b-91ae-364da2661108	www1.huawei.com
HP Notebook PCs with 4G LTE Module Let Remote Users Execute Arbitrary Code on the Target System - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com
Document Display \| HPE Support Center	af854a3a-2127-422b-91ae-364da2661108	h20564.www2.hpe.com	Vendor Advisory
Multiple Huawei ME906 Products CVE-2015-5368 Security Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.