Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-7135
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0, 2018.09.0, and 2018.11.0. The vulnerable software is the Supplemental Update / Online ROM Flash Component for Linux (x64) software. The installer in this software component could be locally exploited to execute arbitrary code. Drive Models can be found in the Vulnerability Resolution field of the security bulletin. The 2019_03 SPP and Supplemental update / Online ROM Flash Component for Linux (x64) after 2019.03.0 has fixed this issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
HPE Service Pack for ProLiant 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HPE Service Pack for ProLiant是美国惠普企业公司（Hewlett Packard Enterprise，HPE）的一套综合的系统软件和固件更新解决方案。 HPE Service Pack for ProLiant 2018.06.0版本、2018.09.0版本和2018.11.0版本中的Supplemental Update/Online ROM Flash Component存在安全漏洞。本地攻击者可利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
HPEHPE Service Pack for ProLiant 2018.06.0 -
HPEHPE Server Solid State Drives HPG2 -
HPEHPE Server SAS Hard Drives HPG2 -
HPEHPE Server SATA Hard Drives HPG2 -
HPEHPE SATA Read Intensive Solid State Drives HPG2 -
HPEHPE NVMe Mixed Use Solid State Drives HPG2 -
HPEHPE Business Critical Hard Drives HPG2 -
HPEHPE Server Enterprise Hard Drives HPG2 -
II. Public POCs for CVE-2020-7135
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-7135
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same vendor: HPE
V. Comments for CVE-2020-7135

No comments yet

Leave a comment