Medium severity · published Feb 15, 2018
CVE-2017-8974
A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF…
4.4
CVSS
0.6%
EPSS
No
On KEV
Description
A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nonstop Server Software · HP
t6533h02 through t6533h04\^adf; t6533l01 through t6533l01\^adn · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-8974
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-8974
Third Party Advisory
http://www.securityfocus.com/bid/102530
Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03804en_us
More from Nonstop Server Software
7.5
CVE-2017-5803
A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through…
5.5
CVE-2017-5788
A Local Disclosure of Sensitive Information vulnerability in HPE NonStop Software Essentials version T0894 T0894H02 through T0894H02^AAI was found
–
CVE-2012-3280
Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of…
–
CVE-2011-2411
Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute…