115 matches found
HPESBCR04825 rev.2 - Certain HPE Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7033: AMD CPU Microcode Signature Verification, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX425 Compute Blade - Prior to v1.7.7 HFP 25.2 HPE Cray EX4252 Compute Blade - Prior to v2.1.0 HFP 25.2 HPE Cray EX235a Accelerator Blade - Prior to v2.1.0 HFP 25.2...
HPESBCR04828 rev.2 - HPE Cray XD670 Server Using AMI BMC Redfish API, Authentication Bypass Vulnerability
Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to BMC v1.19 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-54085 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 10.0 |...
HPESBCR04811 rev.1 - Certain HPE Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7028: AMD System Management Mode (SMM) Callout Vulnerability, Arbitrary Code Execution Vulnerability
Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX425 Compute Blade -Prior to v1.7.6 - HFP Firmware Pack 24.11.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-21924 |...
CVE-2024-51765
A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on configuration, this vulnerability may lead to local/cluster unauthorized access...
CVE-2024-51765
A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on configuration, this vulnerability may lead to local/cluster unauthorized access...
CVE-2024-51765
CVE-2024-51765 affects HPE Cray Data Virtualization Service (DVS). Depending on configuration, it may permit local/cluster unauthorized access. CVSS v3.1 suggests MEDIUM risk (LOCAL, low exploitability, HIGH confidentiality impact). No concrete fix/version details are provided in the connected do...
CVE-2024-51765
A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on configuration, this vulnerability may lead to local/cluster unauthorized access...
HPE Cray Data Virtualization Service(DVS) 安全漏洞
HPE Cray Data Virtualization Service is a distributed network service from HPE. A security vulnerability exists in HPE Cray Data Virtualization Service DVS that stems from vulnerability to unauthorized local or clustered access...
HPESBCR04746 rev.1 - Cray ClusterStor Data Services (Lustre), Local Unauthorized Access
Potential Security Impact: Local: Escalation of Privilege, Unauthorized Access to Files SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Cray ClusterStor Data Services prior to Cray Lustre Client 2.15 B11 - https://support.hpe.com/hpesc/docDisplay?docId=a00136907enus&docLocale=enUS...
HPESBCR04732 rev.1 - Certain HPE Cray Servers Using BIOS (PixieFail), Multiple Vulnerabilities
Potential Security Impact: Local: Unauthorized Access; Remote: Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD665 - Prior to 1.50 Cray SC XD665 Firmware Pack 2024.09.00 HPE Cray XD670 - Prior to 2.01 HPE Cray EX235a Accelerator...
HPESBCR04733 rev.1 - Certain HPE Cray Servers Using OpenSSH (RegreSSHion), Remote Code Execution Vulnerability
Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade - CcNc firmware Prior to 1.9.5-39 HFP - 24.8.1 8/28/2024 HPE Cray EX235n Server - CcNc firmware Prior to 1.9.5-39 HFP - 24.8.1 8/28/2024 HPE Cray...
HPESBCR04683 rev.1 - Certain HPE Cray and ProLiant XL Servers Using Certain AMD EPYC Processors, AMD-SB-7014: SMM Lock Bypass, Local Arbitrary Code Execution Vulnerability
Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade - Prior to v1.9.0 HFP 24.9 HPE Cray EX235n Server - Prior to v1.5.0 HFP 24.9 HPE Cray EX255a Accelerator Blade - Prior to v1.1.0 HFP 24.8.1...
HPESBCR04667 rev.1 - HPE Cray Servers Using AMI MegaRac SPX Software (AMI-SA-2023010), Multiple Vulnerabilities
Potential Security Impact: Local: memory corruption, Buffer Overflow, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD665 - prior to BMC 1.14 in HPE Cray SC XD665 Firmware Pack 2024.01.00 HPE Cray XD670 - prior to BMC 1.14 in BMC Firmware for HP...
HPESBCR04666 rev.1 - Certain HPE Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7009: AMD Processor Security Notice, Local Arbitrary Code Execution Vulnerability
Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade prior to BIOS 1.8.0 in HFP 24.3.1 HPE Cray EX235n Server prior to BIOS 1.3.1 in HFP 23.9 HPE Cray EX425 Compute Blade prior to BIOS 1.7.2 in...
HPESBCR04657 rev.1 - Certain HPE ProLiant DL/XL Servers and HPE Cray Supercomputer Using Certain AMD EPYC Processors, Multiple Vulnerabilities
Potential Security Impact: Local: Arbitrary Code Execution, Code Execution, Denial of Service DoS, Elevated Privileges, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to 2.84 HFP 23.9 HPE ProLiant DL385 Gen10 Plus serve...
CVE-2024-22441
HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...
CVE-2024-22441
HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...
CVE-2024-22441
Technical details about CVE-2024-22441 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.