Hpe Nonstop Kms Server
Monthly
Improper input validation in HPE NonStop KMS Server (Key Management Services) can let a locally authenticated user, with required operator interaction, trigger a buffer overflow via a crafted input message, causing a limited availability impact to the KMS Server. The assessed CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L (score 2.8), so exploitation requires local access, low-level privileges, and user interaction, with no confidentiality or integrity effect. No public exploit code or CISA KEV active-exploitation signal was identified at time of analysis.
Improper input validation in HPE NonStop KMS Server (Key Management Services) can let a locally authenticated user, with required operator interaction, trigger a buffer overflow via a crafted input message, causing a limited availability impact to the KMS Server. The assessed CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L (score 2.8), so exploitation requires local access, low-level privileges, and user interaction, with no confidentiality or integrity effect. No public exploit code or CISA KEV active-exploitation signal was identified at time of analysis.