CVE-2022-37939

Low

Description

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and Superdome Flex 280 Servers v1.45.8.

SeverityLow
CVSS2.3
Exploit probability—
ProductHpe Superdome Flex 280 Server Firmware
PublishedMar 10, 2023
First seenMar 10, 2023

How to fix

Update
  • hpe superdome_flex_280_server_firmware1.45.8 or later
  • hpe superdome_flex_server_firmware3.65.8 or later

Affected products

ProductAffected versionsFixed in
hpe superdome_flex_280_server_firmwarev < 1.45.81.45.8
hpe superdome_flex_server_firmwarev < 3.65.83.65.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-37939 · Hpe Superdome Flex 280 Server Firmware · Dark Radar