EUVD-2026-102097
GHSA-34mc-7x77-6vv7
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain local privileged access
-
ExploitSupply crafted input to RDMA SERVICES NSK
-
ExecutionTrigger out-of-bounds buffer write
-
ImpactCorrupt memory impacting integrity/availability
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, write limits
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires local access to an HPE NonStop system running the RDMA SERVICES NSK component, with the attacker already holding high privileges (PR:H), plus interaction from a separate user (UI:R), and must overcome high attack complexity (AC:H) involving non-deterministic or race/condition-dependent factors to reliably trigger the out-of-bounds write. These stacked limiting factors - local-only vector, pre-existing privileged access, required user interaction, and high complexity - substantially constrain realistic exploitation and rule out remote or unauthenticated attack paths. The input does not name a specific non-default configuration or feature toggle beyond use of the RDMA SERVICES NSK functionality itself. |
| Impact | This is a moderate-severity, low-priority issue in practice. The CVSS 3.1 vector (AV:L/AC:H/PR:H/UI:R/S:U) describes a difficult-to-exploit flaw: an attacker needs local access, already-high privileges, must win against high attack complexity, AND requires a separate user to interact - a stacked set of preconditions that collectively make opportunistic or automated exploitation unrealistic. The base score of 5.8 (MEDIUM) is driven mainly by the integrity and availability impact (I:H/A:H from memory corruption), not by accessibility. No EPSS score, CISA KEV listing, or public POC was provided in the input, so there is no signal of active or probable exploitation to elevate this. The signals are internally consistent - a hard-to-reach but potentially impactful memory-corruption bug - so there is no contradiction to flag between vector and description. Bottom line: a genuine but low-urgency vulnerability best handled through normal patch cycles rather than emergency response, absent new exploitation intelligence. |
| Exploit ScenarioDerived | A local actor who already holds high privileges on an HPE NonStop system triggers the RDMA SERVICES NSK code path with crafted input that overflows a buffer, and - in combination with an action taken by another user - causes an out-of-bounds write. The resulting memory corruption could compromise data integrity or crash the affected service. No public exploit code was identified at time of analysis, and the high complexity plus user-interaction requirement make reliable exploitation difficult. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 15, 2026
Out-of-bounds memory write in HPE NonStop RDMA Services NSK can corrupt memory, and the 5.8 CVSS score reflects a local attack path that also requires high privileges, user interaction, and high attack complexity. Only HPE NonStop systems using the RDMA Services NSK component are affected based on the supplied CPE, and no public exploit code or CISA KEV entry is present in the data. Realistic exploitation is limited to a privileged local user who can induce a separate user to interact under race/condition-dependent circumstances, making this a moderate-severity, low-priority issue in practice.
RemediationAI
No exact fixed version is supplied in the provided data, so the primary action is to consult the HPE advisory at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US and apply any vendor-released update for HPE NonStop RDMA Services NSK. Until a patch is confirmed and deployed, restrict local logon and privileged access to hosts running RDMA Services NSK so that only trusted administrators can reach the component, and reduce the number of users able to satisfy the UI:R condition; this may constrain legitimate operational workflows and should be paired with monitoring for crashes or memory-corruption symptoms. If RDMA Services NSK is not required on a system, disabling or removing that component reduces exposure, at the cost of losing RDMA functionality. Track the advisory for updated fixed-version information because patch status is not otherwise specified in the supplied data.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is CWE-787 (out-of-bounds write) in HPE NonStop RDMA Services NSK, meaning a buffer or memory boundary is not adequately validated, allowing a write past the intended allocation. RDMA Services NSK provides remote direct memory access capabilities on HPE NonStop; because the CVSS vector is AV:L/AC:H/PR:H/UI:R, the vulnerable code path is reachable only from a local context by an already highly privileged actor and requires another user's interaction plus difficult-to-control timing or race conditions. The CPE cpe:2.3:a:hewlett_packard_enterprise:hpe_nonstop_rdma_services_nsk:* confirms the affected product family is HPE NonStop RDMA Services NSK with no specific version constraint given in the source data. Integrity and availability impacts are high (I:H/A:H) while confidentiality is low (C:L), consistent with memory corruption that can crash or alter service state.
Know when Hpe Nonstop Rdma Services Nsk gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H
Memory corruption reachable only locally by an already-privileged user with required interaction and race/complexity conditions justifies AV:L/PR:H/UI:R/AC:H; I:H/A:H reflect corruption and crash impact, C:L minor leakage.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
DescriptionCVE.org
A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Exploit-DB