7.5high
CVE-2016-6273
The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix Lic…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 78%
Public exploits
0
none known
Summary
The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service (crash) via a type 2F packet with a '01 19' opcode.
Exploit prediction (EPSS)
1.76% probability of exploitation in the next 30 days, higher than 78% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
- tenable.com /security/research/tra-2016-29 · x_refsource_MISC, x_transferred
- securitytracker.com /id/1037008 · vdb-entry, x_refsource_SECTRACK, x_transferred
- support.citrix.com /article/CTX217430 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/93450 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2016-6273
- NVD: CVE-2016-6273
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.