Novell Zenworks Handheld Management vulnerabilities

4 CVEs affecting Novell Zenworks Handheld Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2656, published 2011-10-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0742, published 2011-02-02. High severity, CVSS 10.0. EPSS: 9.5% chance of exploitation in the next 30 days. Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400.
CVE-2010-4299, published 2010-11-22. High severity, CVSS 9.3. EPSS: 7.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.
CVE-2011-2656, published 2011-10-24. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than…
CVE-2011-2655, published 2011-10-24. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than…