6.7
CVE-2022-23702
- EPSS 0.06%
- Veröffentlicht 12.04.2022 17:15:09
- Zuletzt bearbeitet 21.11.2024 06:49:08
- Quelle security-alert@hpe.com
- Teams Watchlist Login
- Unerledigt Login
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE Superdome Flex Server Version 3.50.58 or later, HPE Superdome Flex 280 Server Version 1.20.204 or later.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hpe ≫ Superdome Flex Server Firmware Version < 3.50.58
Hpe ≫ Superdome Flex 280 Server Firmware Version < 1.20.204
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.175 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|