VulnerabilityModified

CVE-2020-7199

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software.

CRITICAL 9.8EPSS 9.58%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (9.58%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 9.58% probability · 95th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: hp/edgeline infrastructure manager
Source: security-alert@hpe.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.