CVE-2022-37939 Information disclosure in HPE Superdome Flex Servers; HPE Superdome Flex 280 Servers
Local attackers can disclose sensitive information from HPE Superdome Flex servers, requiring a firmware patch to mitigate.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-37939?
CVE-2022-37939 is a low-severity vulnerability in Hewlett Packard Enterprise (HPE) HPE Superdome Flex Servers; HPE Superdome Flex 280 Servers, published on 8 Mar 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and Superdome Flex 280 Servers v1.45.8.
Which versions are affected by CVE-2022-37939?
It affects 2 products.
Products include Hpe Superdome Flex 280 Server Firmware, Hpe Superdome Flex Server Firmware.
How do I fix CVE-2022-37939?
No fix has been published for CVE-2022-37939 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-37939 being exploited?
There is no known exploitation of CVE-2022-37939 in the wild and no public exploit code.
Other vulnerabilities in Hewlett Packard Enterprise (HPE) HPE Superdome Flex Servers; HPE Superdome Flex 280 Servers
Sources
Also known as GHSA-jc6j-h7h6-qc7h.