PT-2020-19397

CVE-2020-7135

·

Published

2020-04-27

·

Updated

2021-07-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions HPE Service Pack for ProLiant (SPP) versions 2018.06.0 through 2018.11.0 Supplemental Update / Online ROM Flash Component for Linux (x64) versions prior to 2019.03.0
Description A potential security issue has been identified in the disk drive firmware installers on HPE servers running Linux. The installer in the vulnerable software component could be locally exploited to execute arbitrary code.
Recommendations For HPE Service Pack for ProLiant (SPP) versions 2018.06.0 through 2018.11.0, update to the 2019 03 SPP or later. For Supplemental Update / Online ROM Flash Component for Linux (x64) versions prior to 2019.03.0, update to a version after 2019.03.0.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2020-7135
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com