6.7
CVE-2022-23702
- EPSS 0.06%
- Published 12.04.2022 17:15:09
- Last modified 21.11.2024 06:49:08
- Source security-alert@hpe.com
- Teams watchlist Login
- Open Login
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE Superdome Flex Server Version 3.50.58 or later, HPE Superdome Flex 280 Server Version 1.20.204 or later.
Data is provided by the National Vulnerability Database (NVD)
Hpe ≫ Superdome Flex Server Firmware Version < 3.50.58
Hpe ≫ Superdome Flex 280 Server Firmware Version < 1.20.204
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.175 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|