Hpe Nonstop Modular Nsj
Monthly
Predictable pseudo-random number generation in HPE NonStop MODULAR NSJ weakens any security function that depends on unpredictable output, allowing an authenticated low-privileged attacker who can also induce victim interaction to recover the PRNG seed or internal state and forecast subsequent values. The assessed vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L, 4.6) shows exploitation requires a valid low-privilege account plus user interaction, and the high attack complexity reflects the analysis needed to reconstruct the generator state; confidentiality, integrity and availability impacts are all bounded to Low. This is a moderate-severity, low-priority issue in practice, and no public exploit was identified at time of analysis - it has not been confirmed actively exploited (no CISA KEV listing) and no proof-of-concept code is referenced in the available intelligence.
Predictable pseudo-random number generation in HPE NonStop MODULAR NSJ weakens any security function that depends on unpredictable output, allowing an authenticated low-privileged attacker who can also induce victim interaction to recover the PRNG seed or internal state and forecast subsequent values. The assessed vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L, 4.6) shows exploitation requires a valid low-privilege account plus user interaction, and the high attack complexity reflects the analysis needed to reconstruct the generator state; confidentiality, integrity and availability impacts are all bounded to Low. This is a moderate-severity, low-priority issue in practice, and no public exploit was identified at time of analysis - it has not been confirmed actively exploited (no CISA KEV listing) and no proof-of-concept code is referenced in the available intelligence.