Paper/Archive/CVE-2024-42500

CVE-2024-42500

Hewlett Packard Enterprise (HPE) HPE HP-UX ONCplus — HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services.

EPSS 0.4%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (ADP)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 35.9.359 × 207.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services.

Affected

ProductAffectedFixed inSource

HPE HP-UX ONCplusB.11.31.24 – < < B.11.31.24< B.11.31.24CNA

hp-ux< b.11.31.24b.11.31.24CISA-ADP

Scores by source

CISA ADP9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbux04697en_us&docLocale=en_US