{"id":"CVE-2016-8529","aliases":["EUVD-2016-9377","GHSA-jv3r-pq8f-h2w3"],"status":"published","title":"A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and...","description":"A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.","severity":{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03633,"percentile":0.89626,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2018-02-15T22:00:00Z","modified":"2026-06-17T00:54:30Z","products":[{"vendor":"hewlett packard enterprise","product":"storevirtual 4000 storage and storevirtual vsa software running lefthand os"},{"vendor":"hp","product":"lefthand"}],"references":[{"url":"http://www.securitytracker.com/id/1037762","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382958","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/95970","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8529"},{"url":"https://github.com/advisories/GHSA-jv3r-pq8f-h2w3"}],"sources":{"cve":[{"id":"CVE-2016-8529","description":"A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.","status":"published","published":"2018-02-15T22:00:00Z","modified":"2024-09-17T04:13:55.467Z","updated_at":"2026-11-02T14:33:32.724067Z"}],"euvd":[{"id":"EUVD-2016-9377","description":"A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.","status":"published","published":"2018-02-15T22:00:00Z","modified":"2024-09-17T04:13:55Z","updated_at":"2026-11-03T00:28:24.821388Z"}],"ghsa":[{"id":"GHSA-jv3r-pq8f-h2w3","title":"A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and...","description":"A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.","status":"published","published":"2022-05-14T03:38:33Z","modified":"2023-02-02T05:09:52Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:52:45.777625Z"}],"nvd":[{"id":"CVE-2016-8529","description":"A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.","status":"published","published":"2018-02-15T22:29:01.17Z","modified":"2026-06-17T00:54:30.17Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.3,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:39.176887Z"}]}}