Local Data Injection Vulnerability in HPE Superdome Flex and Superdome Flex 280 Servers
CVE-2022-37933

7.8HIGH

Key Information:

Vendor

HP (HP)

Status
HP Superdome Flex Server; HP Superdome Flex 280 Server
Vendor
CVE Published:
5 January 2023

What is CVE-2022-37933?

A potential security vulnerability exists in the HPE Superdome Flex and Superdome Flex 280 servers that could be exploited by local attackers. This vulnerability allows unauthorized data injection, posing a significant risk to data integrity. HPE has released firmware updates to mitigate this issue, specifically in Superdome Flex firmware versions 3.60.50 and below, as well as Superdome Flex 280 servers on firmware versions 1.40.60 and below. Users are advised to apply these updates promptly to protect their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HPE Superdome Flex Server; HPE Superdome Flex 280 Server Prior to 3.60.50; Prior to 1.40.60

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.