Vulnerability in Hewlett Packard Enterprise (HPE) HPE Superdome Flex Servers; 280 Servers
CVE-2022-37939
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and Superdome Flex 280 Servers v1.45.8.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 2.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.002 (7.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 8th percentile — 7.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Hewlett Packard Enterprise (HPE) HPE Superdome Flex Servers; 280 Servers — versions Prior to Superdome Flex 3.65.8; Prior to Superdome Flex 280 1.45.8
- HPE Superdome Flex 280 Server
- HPE Superdome Flex 280 Server Firmware
- HPE Superdome Flex Server
- HPE Superdome Flex Server Firmware
References
- support.hpe.com/hpsc/doc/public/display (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-37939?
- CVE-2022-37939 is a low-severity vulnerability in Hewlett Packard Enterprise (HPE) HPE Superdome Flex Servers; 280 Servers. CVSS score: 2.3/10. Published 2023-03-10.
- How severe is CVE-2022-37939?
- Low severity. CVSS v3 base score is 2.3 out of 10.