CVE-2020-7135
- State
- Published
- Severity
- Not scored
- Published
- Apr 27, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 16, 2020
Description
A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0, 2018.09.0, and 2018.11.0. The vulnerable software is the Supplemental Update / Online ROM Flash Component for Linux (x64) software. The installer in this software component could be locally exploited to execute arbitrary code. Drive Models can be found in the Vulnerability Resolution field of the security bulletin. The 2019_03 SPP and Supplemental update / Online ROM Flash Component for Linux (x64) after 2019.03.0 has fixed this issue.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
HPE Service Pack for ProLiantHPE |
|
HPE Server Solid State DrivesHPE |
|
HPE Server SAS Hard DrivesHPE |
|
HPE Server SATA Hard DrivesHPE |
|
HPE SATA Read Intensive Solid State DrivesHPE |
|
HPE NVMe Mixed Use Solid State DrivesHPE |
|
HPE Business Critical Hard DrivesHPE |
|
HPE Server Enterprise Hard DrivesHPE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.