Hpe Nonstop Ems Distributor
Monthly
Stack-based buffer overflow in HPE NonStop EMS Distributor (CWE-121) allows an attacker who already holds a local presence on the NonStop host to corrupt the memory of the Event Management Service Distributor process, producing low integrity and low availability impact with no confidentiality exposure. The assessed vector (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L, base 4.0) means the flaw cannot be reached remotely, requires conditions beyond the attacker's control to trigger reliably, needs no application-level authentication once local access exists, and involves no user interaction - making this a low-priority issue rather than a critical one. No public exploit code has been identified at time of analysis, there is no CISA KEV listing, and no EPSS score was supplied; the impact is bounded to the local host and to degradation of the EMS Distributor rather than a full system compromise.
Stack-based buffer overflow in HPE NonStop EMS Distributor (CWE-121) allows an attacker who already holds a local presence on the NonStop host to corrupt the memory of the Event Management Service Distributor process, producing low integrity and low availability impact with no confidentiality exposure. The assessed vector (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L, base 4.0) means the flaw cannot be reached remotely, requires conditions beyond the attacker's control to trigger reliably, needs no application-level authentication once local access exists, and involves no user interaction - making this a low-priority issue rather than a critical one. No public exploit code has been identified at time of analysis, there is no CISA KEV listing, and no EPSS score was supplied; the impact is bounded to the local host and to degradation of the EMS Distributor rather than a full system compromise.