LiveActive security incident?Get immediate response
CVE Record

CVE-2016-10395: In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on W...

In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysishigh

Security readout for executives and security teams

Plain-English summary

This flaw affects older Windows deployments of FlexNet Publisher Licensing Service. A defect in named-pipe handling can let an attacker execute code as SYSTEM, the highest Windows privilege. Business urgency is highest where license services run on engineering, industrial, or shared license-server hosts.

Executive priority

Treat as high priority on shared Windows license servers because compromise can yield SYSTEM-level control. Remediate during the next urgent maintenance window, faster for industrial or engineering environments with broad user access.

Technical view

CVE-2016-10395 is a boundary error in FlexNet Publisher versions before Luton SP1 11.14.1.1 on Windows. The issue is tied to a named pipe in the Licensing Service and can cause out-of-bounds memory read access followed by arbitrary code execution with SYSTEM privileges.

Likely exposure

Exposure is limited to Windows systems running FlexNet Publisher Licensing Service before Luton SP1 11.14.1.1, including environments where the service is bundled with third-party licensing products. Schneider Electric references indicate downstream license-manager relevance, but the bundle does not enumerate every affected Schneider product.

Exploitation context

The source bundle does not cite CISA KEV listing or active exploitation. The named-pipe detail suggests a Windows service interaction, but the provided evidence does not clearly state attacker prerequisites, remote reachability, or whether public exploit code exists.

Researcher notes

The public bundle gives the affected version boundary and impact but lacks CVSS, CWE, exploitability prerequisites, and detailed advisory content. Validation should focus on installed service version, vendor-bundled license managers, and whether affected hosts are reachable by untrusted users.

Mitigation direction

  • Upgrade FlexNet Publisher Licensing Service to Luton SP1 11.14.1.1 or later.
  • Apply fixed vendor license-manager packages where FlexNet is bundled by another product.
  • Review Flexera and Schneider advisories for product-specific remediation guidance.
  • Restrict access to license servers to necessary users and management networks.
  • Prioritize remediation on shared engineering, industrial, or administrative Windows hosts.

Validation and detection

  • Inventory Windows hosts for FlexNet Publisher Licensing Service installations.
  • Confirm installed FlexNet Publisher version is 11.14.1.1 or later.
  • Identify third-party products bundling FlexNet Publisher licensing components.
  • Check Schneider advisories if using Schneider Electric floating license managers.
  • Review service host privileges and compensating access controls.
Prepared
Confidence
medium
Sources
8

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

description · low confidence lookup

Execution behavior lookup

The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2016-10395 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
7Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
Flexera Software LLCFlexNet PublisherVersions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platformListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.