Log in Start free

Vulnerability · Published Jan 3, 2023 · Assigned by hpe

CVE-2022-37933

High 7.3

In plain English

A high-severity injection in HPE Superdome Flex Server; HPE Superdome Flex 280 Server from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.3%top 79.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware 3.60.50 and below and Superdome Flex 280 servers firmware 1.40.60 and below.

Affected products (as reported)

VendorProductVersions
Hewlett Packard Enterprise (HPE) HPE Superdome Flex Server; HPE Superdome Flex 280 Server Prior to 3.60.50; Prior to 1.40.60

Weakness: CWE-74 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L

References