Hpe Nonstop Ndsrest
Monthly
Heap buffer overflow in HPE NonStop NDSREST (CVSS 7.1) can corrupt a resume-execution address and potentially redirect execution flow, producing high integrity and availability impact without confidentiality impact. Exploitation requires authenticated low-privilege local access (AV:L, PR:L), no user interaction, and low attack complexity; if NDSREST is network-exposed in a given deployment, effective reachability may be broader than the local vector suggests. No public exploit identified at time of analysis, and CISA KEV does not confirm active exploitation.
Heap buffer overflow in HPE NonStop NDSREST (CVSS 7.1) can corrupt a resume-execution address and potentially redirect execution flow, producing high integrity and availability impact without confidentiality impact. Exploitation requires authenticated low-privilege local access (AV:L, PR:L), no user interaction, and low attack complexity; if NDSREST is network-exposed in a given deployment, effective reachability may be broader than the local vector suggests. No public exploit identified at time of analysis, and CISA KEV does not confirm active exploitation.