VIR Vulnerability Intelligence Relay

CVE-2015-2114

medium
Published 2015-04-14 · Modified 2026-05-06
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8

Description

HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: hp-security-alert@hp.com — https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04634535

Application impact
VendorProductVersionsFixed
hp hpsupport_solution_framework{"endIncluding":"11.51.0027"}

References

CWEs

CWE-254

Verify integrity in audit chain (admin only). AS-IS.