HPESBHF04380 rev.3 - Certain HPE ProLiant BL/DL/ML Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6410-20-2022 HPE ProLiant MicroServer Gen10 Plus v2 - Prior to 1.6410-20-2022 HPE ProLiant ML30 Gen10 Plus server - Prior to...

HPESBHF04366 rev.3 - HPE Integrated Lights-Out 5 (iLO 5), or Integrated Lights-out 4 (iLO 4) Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.72 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.81 HP ConvergedSystem 700 - Varies, based on server...

HPESBHF04344 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE ProLiant XL290n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE Apollo 2000 Gen10 Plus System - Prior to...

HPESBHF04354 rev.1 - Certain HPE ProLiant Apollo, XL Servers Using Certain Intel Processor BIOS, INTEL-SA-00686, 2022.2 IPU – Intel BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE ProLiant XL290n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE Apollo 2000 Gen10 Plus System - Prior to...

HPESBHF04347 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 CVS...

HPESBHF04341 rev.1 - Certain HPE ProLiant DL Servers Using Certain Intel Processor BIOS, INTEL-SA-00686, 2022.2 IPU – Intel BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 1.6207-14-2022 HPE ProLiant DL360 Gen10 Plus server - Prior to 1.6207-14-2022 HPE ProLiant DL380 Gen10 Plus server - Prio...

HPESBHF04342 rev.1 - Certain HPE ProLiant DL/ML Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6007-14-2022 HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 1.6207-14-2022 HPE ProLiant DL360 Gen10 Plus server - Pri...

HPESBHF04356 rev. 1 - Certain HPE ProLiant DX Servers Using Certain Intel Processor BIOS, INTEL-SA-00686, 2022.2 IPU – Intel BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 CVSS...

HPESBHF04303 rev.1 - Certain HPE Moonshot/Edgeline Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to H051.9205182022 HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m710x-L Server...

HPESBHF04322 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant DX190r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant...

HPESBHF04320 rev.2 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Server - Prior to 2.6605172022 HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6606012022 HPE ProLiant DL20 Gen10 Server - Prior to 2.5804142022 HP...

Vulnerabilities fixed in HPE ProLiant Intel BIOS

Vulnerabilities have been fixed in the Intel BIOS of HPE ProLiant DX servers. The vulnerabilities in DX Gen 10 servers with features DX170r, DX190r, DX360, DX380, DX560 and DX4200 allow a local malicious person able to obtain sensitive information or increase privileges. HPE has made updates...

HPESBHF04301 rev.1 - Certain HPE Edgeline Servers Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU - Intel Xeon Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant e910 Server Blade - Prior to H081.9404182022 HPE ProLiant e910t Server Blade - Prior to H081.9404182022 CVSS Scores: | CVE | CVSS Vector ...

HPESBHF04306 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Processors, INTEL-SA-00617, 2022.1 IPU - Intel Processor Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m750 Server Blade - Prior to H091.5004152022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

HPESBHF04305 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Software Guard Extensions (SGX), INTEL-SA-00614, 2022.1 IPU - Intel SGX Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m750 Server Blade - Prior to H091.5004152022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

HPESBHF04235 rev.1 - HPE ProLiant Gen10 and Gen10 Plus Servers Using Certain AMD EPYC Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Compromise of System Integrity, Denial of Service DoS, Disclosure of Information, memory corruption, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL385 Gen10 Server - Prior to v2.56 HPE ProLiant DL325 Gen10 Server -...

HPESBHF04286 rev.4 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Server - Prior to 2.6605172022 - Addresses an incomplete fix for CVE-2021-0159, CVE-2021-33123, and CVE-2021-33124 HPE ProLian...

HPESBHF04288 rev.1 - Certain HPE ProLiant ML/DL/MicroServer Servers Using Intel Processor Software Guard Extensions (SGX), INTEL-SA-00614, 2022.1 IPU, Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to 2.5804142022 HPE ProLiant DL20 Gen10 Plus server - Prior to 1.5804182022 HPE ProLiant ML30 Gen10 Server - Prior to 2.5804142022 HPE...

HPESBHF04296 rev.2 - Certain HPE ProLiant DX Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. Addresses an incomplete fix for CVE-2021-0159, CVE-2021-33123, and...

HPESBHF04297 rev.1 - Certain HPE ProLiant DX Servers Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to 2.6404212022 HPE ProLiant DX190r Gen10 server - Prior to 2.6404212022 HPE ProLiant DX360 Gen10 server -...