HP Proliant e910 Firmware vulnerabilities

2 CVEs affecting HP Proliant e910 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7207, published 2020-11-05.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-11135, published 2019-11-14. Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days. TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
• CVE-2020-7207, published 2020-11-05. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the…