VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 27, 2020· Updated Jun 17, 2026

CVE-2020-7135

CVE-2020-7135

Description

A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0, 2018.09.0, and 2018.11.0. The vulnerable software is the Supplemental Update / Online ROM Flash Component for Linux (x64) software. The installer in this software component could be locally exploited to execute arbitrary code. Drive Models can be found in the Vulnerability Resolution field of the security bulletin. The 2019_03 SPP and Supplemental update / Online ROM Flash Component for Linux (x64) after 2019.03.0 has fixed this issue.

Affected products

14
  • Microfocus/Service Pack For Proliant4 versions
    cpe:2.3:a:hp:service_pack_for_proliant:2018.06.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:hp:service_pack_for_proliant:2018.06.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_pack_for_proliant:2018.09.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_pack_for_proliant:2018.11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:service_pack_for_proliant:2019.03.0:*:*:*:*:*:*:*
  • HPE/Service Pack For Proliantllm-fuzzy2 versions
    <=2018.11.0+ 1 more
    • (no CPE)range: <=2018.11.0
    • (no CPE)range: 2018.06.0
  • HPE/Supplemental Update / Online ROM Flash Component for Linux (x64)llm-fuzzy
    Range: <=2018.11.0
  • HPE/HPE Business Critical Hard Drivesv5
    Range: HPG2
  • HPE/HPE NVMe Mixed Use Solid State Drivesv5
    Range: HPG2
  • HPE/HPE SATA Read Intensive Solid State Drivesv5
    Range: HPG2
  • HPE/HPE Server Enterprise Hard Drivesv5
    Range: HPG2
  • HPE/HPE Server SAS Hard Drivesv5
    Range: HPG2
  • HPE/HPE Server SATA Hard Drivesv5
    Range: HPG2
  • HPE/HPE Server Solid State Drivesv5
    Range: HPG2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.