Hpe Nonstop Cipsam
Monthly
An out-of-bounds write in HPE NonStop CIPSAM (version T0693L02^BAU and earlier) lets an attacker with local access and at least low-level privileges corrupt adjacent buffer memory, producing High integrity and High availability impact on the affected NonStop system. The CVSS 3.1 base score of 8.7 is driven by the changed-scope metric combined with those impact values rather than by remote reach - the vector is AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H, so this is an authenticated, local-access issue and is not remotely exploitable by an unauthenticated attacker. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the realistic attacker population is narrowed by the requirement for prior credentials on a proprietary, access-controlled mission-critical platform.
An out-of-bounds write in HPE NonStop CIPSAM (version T0693L02^BAU and earlier) lets an attacker with local access and at least low-level privileges corrupt adjacent buffer memory, producing High integrity and High availability impact on the affected NonStop system. The CVSS 3.1 base score of 8.7 is driven by the changed-scope metric combined with those impact values rather than by remote reach - the vector is AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H, so this is an authenticated, local-access issue and is not remotely exploitable by an unauthenticated attacker. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the realistic attacker population is narrowed by the requirement for prior credentials on a proprietary, access-controlled mission-critical platform.