HP HPE IoT + Gcp vulnerabilities

2 CVEs affecting HP HPE IoT + Gcp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7134, published 2020-04-24.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7133, published 2020-04-24. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.
• CVE-2020-7134, published 2020-04-24. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.