HP Universal Internet Of Things vulnerabilities

3 CVEs affecting HP Universal Internet Of Things, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11995, published 2019-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7111, published 2018-10-17. Medium severity, CVSS 5.3. EPSS: 5.3% chance of exploitation in the next 30 days. A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and…
CVE-2019-11995, published 2019-12-18. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE UIoT: For customers with release UIoT…
CVE-2019-11990, published 2019-07-19. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Security vulnerabilities in HPE UIoT versions 1.6, 1.5, 1.4.2, 1.4.1, 1.4.0, and 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE UIoT:…