How severe is CVE-2019-11995?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in HP Universal Internet Of Things

CVE-2019-11995

Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE UIoT: For customers with release UIoT 1.2.4.2 fixes are made available with 1.2.4.2 RP3 HF1. For customers with release older than 1.2.4.2, such as 1.2.4.1, 1.2.4.0, the resolution will be to upgrade to 1.2.4.2 RP3 HF1 Customers are requested to upgrade to the updated versions or contact HPE support for further assistance.

EPSS: 0.021 (80.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hp Universal_internet_of_things — versions 1.2.4.0, 1.2.4.1, 1.2.4.2
N/a Hpe Iot + Gcp — versions 1.2.4.2

References

security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-11995?: CVE-2019-11995 is a high-severity vulnerability in HP Universal Internet Of Things. CVSS score: 7.5/10. Published 2019-12-18.
How severe is CVE-2019-11995?: High severity. CVSS v3 base score is 7.5 out of 10.