CVE-2021-26581

Medium

Description

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later.

SeverityMedium
CVSS6.5
Exploit probability—
ProductHpe Superdome Flex Server Firmware
PublishedApr 1, 2021
First seenApr 1, 2021

How to fix

Update
  • hpe superdome_flex_server_firmware3.30.142 or later

Affected products

ProductAffected versionsFixed in
hpe superdome_flex_server_firmwarev < 3.30.1423.30.142

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.