HPE Synergy 480 GEN9 Compute Module Firmware vulnerabilities

2 CVEs affecting HPE Synergy 480 GEN9 Compute Module Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11137, published 2019-11-14.

More from HPE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-11137, published 2019-11-14. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors…
• CVE-2019-11136, published 2019-11-14. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a…