PT-2021-17058 · Hewlett Packard · Hpe Superdome Flex Server

Published 2021-04-01 · Updated 2021-04-06 · CVE-2021-26581

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HPE Superdome Flex server (affected versions not specified)

Description A potential security issue has been identified, allowing for a denial of service attack to be remotely exploited, resulting in hung connections to the BMC web interface. The only way to recover from this situation is to reboot the monarch BMC. Other BMC management functions are not impacted.

Recommendations For HPE Superdome Flex Server, update to Superdome Flex Server Firmware 3.30.142 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-26581

Affected Products

Hpe Superdome Flex Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-26581 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04102en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26581 · Vendor Advisory