Lucene search

HpeCVE-2021-26581

HistoryApr 01, 2021 - 7:15 p.m.

CVE-2021-26581

2021-04-0119:15:13

hpe

web.nvd.nist.gov

hpe

superdome flex

server

vulnerability

bmc

web interface

nvd

cve-2021-26581

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

35.0%

JSON

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later.

Affected configurations

Nvd

Node

hpesuperdome_flex_serverMatch-

AND

hpesuperdome_flex_server_firmwareRange<3.30.142

VendorProductVersionCPE
hpesuperdome_flex_server-cpe:2.3:h:hpe:superdome_flex_server:-:*:*:*:*:*:*:*
hpesuperdome_flex_server_firmware*cpe:2.3:o:hpe:superdome_flex_server_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hpe	superdome_flex_server	-	cpe:2.3:h:hpe:superdome_flex_server:-:::::::*
hpe	superdome_flex_server_firmware	*	cpe:2.3:o:hpe:superdome_flex_server_firmware::::::::

CNA Affected

[
  {
    "product": "HPE Superdome Flex Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to version 3.30.142"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04102en_us

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

35.0%

JSON

Related for CVE-2021-26581