PT-2023-13563 · Hewlett Packard · Hpe Superdome Flex Server+1

Published 2023-03-08 · Updated 2023-03-16 · CVE-2022-37939

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Superdome Flex Servers versions prior to 3.65.8 HPE Superdome Flex 280 Servers versions prior to 1.45.8

Description A potential security issue has been identified in HPE Superdome Flex and Superdome Flex 280 servers, which could be locally exploited to allow disclosure of information.

Recommendations For HPE Superdome Flex Servers versions prior to 3.65.8, update to version 3.65.8 to resolve the issue. For HPE Superdome Flex 280 Servers versions prior to 1.45.8, update to version 1.45.8 to resolve the issue.

Fix

Related Identifiers

CVE-2022-37939

Affected Products

Hpe Superdome Flex 280 Servers

Hpe Superdome Flex Server

References · 4

• https://osv.dev/vulnerability/CVE-2022-37939 · Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04453en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37939 · Security Note
• https://t.me/cibsecurity/59835 · Telegram Post