Vulnerability · Published Dec 2, 2024 · Assigned by hpe
CVE-2024-11856HPE IceWall Products, Remote Unauthorized Data Modification
Low 3.7
In plain English
A low-severity security flaw in HPE IceWall from Hewlett Packard Enterprise. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.3%top 79.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise | HPE IceWall | IceWall Gen11 – before Patch Release 14IceWall SSO – before Patch Release 10 |
Weakness: CWE-522 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N