Vulnerability · Published Apr 12, 2022 · Assigned by hpe
CVE-2022-23702
Medium 6.7
In plain English
A medium-severity security flaw in HPE Superdome Flex Server; HPE Superdome Flex 280 Server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)0.2%top 85.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE Superdome Flex Server Version 3.50.58 or later, HPE Superdome Flex 280 Server Version 1.20.204 or later.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HPE Superdome Flex Server; HPE Superdome Flex 280 Server | Prior to 3.50.58Prior to 1.20.204 |