Hpe Nonstop Itp Webserver
Monthly
Remote, unauthenticated requests to HPE NonStop iTP WebServer can trigger memory corruption severe enough to shut the service and system down, giving network-positioned attackers a reliable denial-of-service with a secondary integrity impact. The assessed vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H, CVSS 8.2) shows no authentication, user interaction, or non-default feature is required - the only real barrier is that the target web server must be network-reachable, and it runs solely on the niche HPE NonStop platform rather than commodity servers. No public exploit code or confirmed active exploitation has been identified at time of analysis, and no EPSS score was supplied; combined with the narrow platform footprint, this is a genuine but bounded priority rather than a mass-exploitation threat.
Remote, unauthenticated requests to HPE NonStop iTP WebServer can trigger memory corruption severe enough to shut the service and system down, giving network-positioned attackers a reliable denial-of-service with a secondary integrity impact. The assessed vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H, CVSS 8.2) shows no authentication, user interaction, or non-default feature is required - the only real barrier is that the target web server must be network-reachable, and it runs solely on the niche HPE NonStop platform rather than commodity servers. No public exploit code or confirmed active exploitation has been identified at time of analysis, and no EPSS score was supplied; combined with the narrow platform footprint, this is a genuine but bounded priority rather than a mass-exploitation threat.