Lucene search

K
hpHP Product Security Response TeamHPSBHF03912
HistoryFeb 13, 2024 - 12:00 a.m.

Intel Virtual RAID on CPU (VROC) February 2024 Security Update

2024-02-1300:00:00
HP Product Security Response Team
support.hp.com
5
intel
vroc
security
update
privilege escalation
vulnerability
hp
platforms
softpaqs

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

Intel has informed HP of potential security vulnerabilities in some Intel® Virtual RAID on CPU (VROC) software, which might allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities.

Intel has released updates to mitigate the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerability. See the affected platforms listed below.

Affected configurations

Vulners
Node
hphp_z4_g4_workstation_\(core-x\)Range< 8.0.8.1001
OR
hphp_z4_g4_workstation_\(xeon_w\)Range< 8.0.8.1001
OR
hphp_z6_g4_workstationRange< 8.0.8.1001
OR
hphp_z8_g4_workstationRange< 8.0.8.1001
OR
hphp_zcentral_4r_workstationRange< 8.0.8.1001

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

Related for HPSBHF03912