HPE Insight Remote Support Multiple Vulnerabilities Advisory (HPESBGN04731)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: HPE Insight Remote Support (IRS), Multiple Vulnerabilities - Vulnerability ID: HPESBGN04731 rev.1 - Vulnerability Type: Remote Code Execution, Directory Traversal, Information Disclosure - Vulnerability Impact: Remote Code Execution, Directory Traversal, Information Disclosure 2. Vulnerability Severity: High 3. Vulnerability Release Date: November 22, 2024 - Update Date: November 22, 2024 4. Affected Software Versions: - HPE Insight Remote Support - Prior to v7.14.0.629 5. Vulnerability Scores: - CVSS 3.1 Score: 7.3 - CVSS 3.1 Score: 8.1 - CVSS 3.1 Score: 7.3 - CVSS 3.1 Score: 7.3 - CVSS 3.1 Score: 9.8 6. Vulnerability Disclosure: - These vulnerabilities were disclosed to Hewlett Packard Enterprise by an anonymous researcher through Trend Micro Zero Day Initiative. 7. Solution: - Upgrade to HPE Insight Remote Support v7.14.0.629 or later. 8. Reporting Vulnerabilities: - Potential security vulnerabilities can be reported via: - Website: https://www.hpe.com/info/report-security-vulnerability - Email: security-alert@hpe.com 9. Subscribing to Security Updates: - Subscribe to future HPE security bulletins via email. 10. Related Links: - HPE Security Response Policy: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00100637en_us - HPE Security Bulletin Archive: http://www.hpe.com/support/Security_Bulletin_Archive This information provides a detailed description of multiple vulnerabilities in HPE Insight Remote Support, including their impact, severity scores, mitigation steps, and methods for reporting and subscribing to future security updates.

Goal Reached Thanks to every supporter — we hit 100%!

HPE Insight Remote Support Multiple Vulnerabilities Advisory (HPESBGN04731)