CVE-2014-2608: HPE Smart Update Manager

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors.

Affected products

• HPE Smart Update Manager: from 6.0.0, before 6.4.1 (fixed in 6.4.1); from 6.2.0, before 6.4.1 (fixed in 6.4.1)

Published 2014-12-10. Last modified 2026-06-17.