PT-2020-19398 · Hewlett Packard · Hpe Smart Update Manager

Published 2020-04-30 · Updated 2020-05-07 · CVE-2020-7136

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Smart Update Manager (SUM) versions prior to 8.5.6

Description A security issue in HPE Smart Update Manager could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this issue.

Recommendations For versions prior to 8.5.6, download the latest version of HPE Smart Update Manager (SUM) or the latest Service Pack For ProLiant (SPP) from the HPE Support Center.

Fix

Related Identifiers

CVE-2020-7136

Affected Products

Hpe Smart Update Manager

References · 4

• https://osv.dev/vulnerability/CVE-2020-7136 · Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03997en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7136 · Security Note
• https://t.me/cvenotify/3459 · Telegram Post