CVE-2022-37933 HIGH

CVE-2022-37933

Vendor Hewlett Packard Enterprise (Hpe)
Product HPE Superdome Flex Server; HPE Superdome Flex 280 Server
Published January 3, 2023
Last update April 10, 2025
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L

What the vulnerability does

01Description

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware 3.60.50 and below and Superdome Flex 280 servers firmware 1.40.60 and below.

Key dates

02Disclosure timeline

January 3, 2023 CVE published
April 10, 2025 Record updated