Vulnerability in HPE Superdome Flex 280 Server
CVE-2022-23702
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE Superdome Flex Server Version 3.50.58 or later, HPE Superdome Flex 280 Server Version 1.20.204 or later.
EPSS: 0.002 (13.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Hpe Superdome_flex_280_server
- Hpe Superdome_flex_280_server_firmware
- Hpe Superdome_flex_server
- Hpe Superdome_flex_server_firmware
- N/a Hpe Superdome Flex Server; 280 Server — versions Prior to 3.50.58, Prior to 1.20.204
References
- security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-23702?
- CVE-2022-23702 is a medium-severity vulnerability in HPE Superdome Flex 280 Server. CVSS score: 6.7/10. Published 2022-04-12.
- How severe is CVE-2022-23702?
- Medium severity. CVSS v3 base score is 6.7 out of 10.