Vulnerability · Published Dec 2, 2020 · Assigned by hpe
CVE-2020-7199
Critical 9.8
In plain English
A critical-severity security flaw in HPE Edgeline Infrastructure Management Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 9.6% (higher than 95% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)9.6%top 4.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HPE Edgeline Infrastructure Management Software | Prior to 1.21 |