How severe is CVE-2015-5368?

CVE-2015-5368 has a CVSS 2.0 base score of 7.8, rated high severity.

Is CVE-2015-5368 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 7% (93rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-5368?

CVE-2015-5368 primarily affects Hp Hspa+ Gobi 4g. In total, 39 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-5368?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2015-5368 published?

CVE-2015-5368 was published on 2015-08-27 and last updated on 2026-06-17.

CVE-2015-5368

CVE-2015-5368 is a high-severity vulnerability in Hp Hspa+ Gobi 4g with a CVSS 2.0 base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-119.

Key facts

Severity: High (CVSS 2.0 base score 7.8)
EPSS exploit prediction: 7% (93rd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-119
Affected product: Hp Hspa+ Gobi 4g
Published: 2015-08-27
Last modified: 2026-06-17

Description

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors.

Frequently asked questions

What is CVE-2015-5368?: The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors.
How severe is CVE-2015-5368?: CVE-2015-5368 has a CVSS 2.0 base score of 7.8, rated high severity.
Is CVE-2015-5368 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 7% (93rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2015-5368?: CVE-2015-5368 primarily affects Hp Hspa+ Gobi 4g. In total, 39 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2015-5368?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2015-5368 published?: CVE-2015-5368 was published on 2015-08-27 and last updated on 2026-06-17.

References

Affected products (39)

cpe:2.3:a:hp:hspa\+_gobi_4g:12.500.00.15.1802:*:*:*:*:*:*:*
cpe:2.3:a:hp:lt4112_lte:12.500.00.15.1802:*:*:*:*:*:*:*
cpe:2.3:h:hp:elite_x2_1010_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_1040_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_1040_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_820_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_820_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_825_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_840_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_840_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_845_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_850_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_850_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_855_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_folio_9470m:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_revolve_810_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitebook_revolve_810_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:elitepad_1000_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:mt41_thin_client:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_430_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_430_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_440_g0:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_440_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_440_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_450_g0:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_450_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_450_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_640_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_645_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_650_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_655_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:probook_x2_620_g1:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:spectre_x2_13-smb_pro:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_14:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_14_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15_g2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_15u:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:zbook_17_g2:*:*:*:*:*:*:*:*

More vulnerabilities in Hp Hspa+ Gobi 4g

CVE-2015-5367 — Medium (CVSS 6.9): The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook,…

All CVEs affecting Hp Hspa+ Gobi 4g →

Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities

CVE-2026-2778 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in…
CVE-2026-2776 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability…
CVE-2025-1866 — Critical (CVSS 10.0): Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows…
CVE-2022-27625 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
CVE-2022-27624 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
CVE-2020-11896 — Critical (CVSS 10.0): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

Browse all CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities →