Hpe Nonstop Qiomon
Monthly
Out-of-bounds write in HPE NonStop QIOMON (T8671L02^ABH and earlier) allows a low-privilege authenticated actor to corrupt adjacent buffer memory when QIOMON processes attacker-influenced input, with the integrity and availability impact rated High and confidentiality impact Low. Exploitation is constrained on two fronts: the attacker must already hold authenticated low-privilege access to the NonStop environment (CVSS PR:L) and a legitimate user must perform an action that feeds malicious input into QIOMON (CVSS UI:R), so the issue is not exploitable as an end-to-end unauthenticated remote attack. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV; EPSS data was not provided, so it should be treated as a moderate-priority, non-emergency hardening item.
Out-of-bounds write in HPE NonStop QIOMON (T8671L02^ABH and earlier) allows a low-privilege authenticated actor to corrupt adjacent buffer memory when QIOMON processes attacker-influenced input, with the integrity and availability impact rated High and confidentiality impact Low. Exploitation is constrained on two fronts: the attacker must already hold authenticated low-privilege access to the NonStop environment (CVSS PR:L) and a legitimate user must perform an action that feeds malicious input into QIOMON (CVSS UI:R), so the issue is not exploitable as an end-to-end unauthenticated remote attack. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV; EPSS data was not provided, so it should be treated as a moderate-priority, non-emergency hardening item.