What is CVE-2018-7120?

CVE-2018-7120 is a critical-severity vulnerability in HP Synergy. CVSS score: 9.8/10. Published 2019-05-10.

How severe is CVE-2018-7120?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in HP Synergy

CVE-2018-7120

A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy Custom SPP 2018.11.20190205, could allow local or remote unauthorized elevation of privilege.

EPSS: 0.021 (79.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hp Synergy
Hp Synergy_firmware — versions 5.00.50
Hpe Virtual Connect Se 16gb Fibre Channel Module For Synergy — versions HPE Virtual Connect SE 16Gb Fibre Channel Module for Synergy 5.00.50 firmware - Part of HPE Synergy Custom SPP 2018.11.20190205

References

security-alert@hpe.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-7120?: CVE-2018-7120 is a critical-severity vulnerability in HP Synergy. CVSS score: 9.8/10. Published 2019-05-10.
How severe is CVE-2018-7120?: Critical severity. CVSS v3 base score is 9.8 out of 10.