Skip to main content

Hpe Nonstop Telserv

2 CVEs product

Monthly

CVE-2026-76663 Oct 15, 02:16 HIGH This Week

Stack-based buffer overflow in HPE NonStop TELSERV versions T9553L01^BAJ and earlier allows remote, unauthenticated attackers to corrupt memory and crash the service, causing a denial of service. The flaw is network-reachable with low complexity and requires no authentication or user interaction per the CVSS vector (PR:N/UI:N), so any party able to open a TELSERV session can attempt the overflow. No public exploit identified at time of analysis, and the impact is limited to availability - no code execution or data disclosure is described.

Buffer Overflow Stack Overflow Hpe Nonstop Telserv
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2026-76662 Oct 15, 02:11 MEDIUM This Month

Stack-based buffer overflow in HPE NonStop TELSERV (T9553L01^BAJ and earlier) allows unauthenticated remote attackers who can reach the Telnet server subsystem to corrupt memory and crash the service, producing a denial-of-service condition. The vulnerability is rated CVSS 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H): exploitation is network-reachable and requires no credentials, but the High attack complexity means the attacker must satisfy non-trivial conditions such as a specific memory state to reliably trigger the overflow, and the impact is confined to availability with no confidentiality or integrity effect. There is no public exploit identified at time of analysis, no CISA KEV listing, and NonStop deployments are typically confined to segmented back-office or payment networks rather than being internet-facing, making this a moderate-severity, limited-impact issue rather than a top-tier priority.

Buffer Overflow Stack Overflow Hpe Nonstop Telserv
NVD
CVSS 3.1
5.9
EPSS
0.2%
EPSS 0% CVSS 7.5
HIGH This Week

Stack-based buffer overflow in HPE NonStop TELSERV versions T9553L01^BAJ and earlier allows remote, unauthenticated attackers to corrupt memory and crash the service, causing a denial of service. The flaw is network-reachable with low complexity and requires no authentication or user interaction per the CVSS vector (PR:N/UI:N), so any party able to open a TELSERV session can attempt the overflow. No public exploit identified at time of analysis, and the impact is limited to availability - no code execution or data disclosure is described.

Buffer Overflow Stack Overflow Hpe Nonstop Telserv
NVD
EPSS 0% CVSS 5.9
MEDIUM This Month

Stack-based buffer overflow in HPE NonStop TELSERV (T9553L01^BAJ and earlier) allows unauthenticated remote attackers who can reach the Telnet server subsystem to corrupt memory and crash the service, producing a denial-of-service condition. The vulnerability is rated CVSS 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H): exploitation is network-reachable and requires no credentials, but the High attack complexity means the attacker must satisfy non-trivial conditions such as a specific memory state to reliably trigger the overflow, and the impact is confined to availability with no confidentiality or integrity effect. There is no public exploit identified at time of analysis, no CISA KEV listing, and NonStop deployments are typically confined to segmented back-office or payment networks rather than being internet-facing, making this a moderate-severity, limited-impact issue rather than a top-tier priority.

Buffer Overflow Stack Overflow Hpe Nonstop Telserv
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy