PT-2022-11: Remote Buffer Overflow in HPE iLO Amplifier Pack

The vulnerability was identified in HPE iLO Amplifier Pack versions prior to 2.12. These vulnerabilities could be exploited by a highly privileged user to remotely execute code that could lead to a loss of confidentiality, integrity, and availability. Vulnerability status: Confirmed by vendor Dat...

JVN#12969207: HPE Agentless Management registers unquoted service paths

HP Agentless Management provided by Hewlett Packard Enterprise registers some Windows services with unquoted file paths CWE-428. Impact When a registered Windows service path contains spaces and is unquoted, and a malicious executable is placed on a certain path, the executable may be executed wi...

HPESBHF04244 rev.4 - Certain HPE Servers using certain Intel Processor BIOS, Intel Processor Breakpoint Control Flow Advisory, Intel-SA-00532, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6001132022 HPE ProLiant DL20 Gen10 Server - Prior to 2.5601202022 HPE ProLiant DL160 Gen10 Server - Prior to 2.6001132022 HPE...

HPESBHF04243 rev.3 - Certain HPE Servers using certain Intel Processor BIOS, INTEL-SA-00527, 2021.2 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4510 Gen10 System - Prior to 2.6001132022 HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6001132022 HPE...

CVE-2021-29218

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows versions: Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentialit...

CVE-2021-29219

A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130EI7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130EL7.10.R3507P02...

CVE-2021-29218

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows versions: Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentialit...

Buffer overflow

A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130EI7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130EL7.10.R3507P02...

Design/Logic Flaw

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows versions: Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentialit...

CVE-2021-29219

A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130EI7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130EL7.10.R3507P02...

CVE-2021-29219

CVE-2021-29219 affects HPE FlexNetwork 5130 EL Switch Series prior to 5130_EL_7.10.R3507P02, with a local buffer overflow vulnerability in the device firmware. The issue is mitigated by upgrading to 5130_EL_7.10.R3507P02 (HPE fix as of the referenced advisories). The available documents identify ...

CVE-2021-29218

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows versions: Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentialit...

CVE-2021-29218

CVE-2021-29218 | A local unquoted search path vulnerability in HPE Agentless Management Service for Windows affects versions prior to 1.44.0.0 (and 10.96.0.0). The issue allows a local attacker with high privileges to execute malware, risking confidentiality, integrity, and availability. Public s...

HPESBNW04234 rev.1 - HPE FlexNetwork 5130 EL Switch Series, Local Buffer Overflow

Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE FlexNetwork 5130 EI Switch Series - Prior to 5130EI7.10.R3507P02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29219 |...

CVE-2021-29215

A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in versions: Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to...

Design/Logic Flaw

A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in versions: Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to...

CVE-2021-29215

A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in versions: Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to...

CVE-2021-29215

Summary: CVE-2021-29215 affects HPE Ezmeral Data Fabric (TEZ MapR ecosystem component). Vulnerable in TEZ MapR versions prior to Tez-0.8, Tez-0.9, and Tez-0.9.2 (specific builds listed in the initial description). The issue is described as a remote access restriction bypass within the TEZ MapR co...

HPESBGN04227 rev.1 - HPE Edge Infrastructure Automation, Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edge Infrastructure Automation - Prior to 2.0.6.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBGN04224 rev.1 - HPE Real Time Management System (RTMS), Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Real Time Management System RTMS - Prior to RTMS 3.00.72.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...