HPESBCR04979 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

🗓️ 04 Dec 2025 00:00:00Reported by hpeType

HPE Cray XD670 has multiple Intel processor vulnerabilities; update BIOS to v2.06+ via HPE Support.

Reporter	Title	Published	Views	Family All 34
BDU FSTEC	The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) arises from synchronization errors when using shared resources, allowing attackers to gain increased privileges.	19 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) and the software for remote management and monitoring of the Intel Server Platform Services (SPS) are related to manipulating an unknown input, resulting in a timing mismatch that allows a perpetrator to disclose protected information.	19 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to reading beyond the buffer in memory, allow attackers to disclose protected information.	19 Sep 202500:00	–	bdu_fstec
CNNVD	Intel Converged Security and Management Engine 安全漏洞	12 Aug 202500:00	–	cnnvd
CNNVD	Intel SPS和Intel CSME 安全漏洞	12 Aug 202500:00	–	cnnvd
CNNVD	Intel AMT和Intel Standard Manageability 缓冲区错误漏洞	12 Aug 202500:00	–	cnnvd
CNVD	Intel Converged Security and Management Engine Competitive Conditions Vulnerability	20 Aug 202500:00	–	cnvd
CVE	CVE-2025-20037	12 Aug 202516:57	–	cve
CVE	CVE-2025-20067	12 Aug 202516:58	–	cve
CVE	CVE-2025-22392	12 Aug 202516:58	–	cve