Hpe Superdome Flex 280 Server
Monthly
OS command injection on the Remote Management Controller (RMC) of HPE Compute Scale-up Server 3200/3250 and Superdome Flex / Flex 280 platforms allows an attacker who already holds high-privilege credentials on the RMC to run arbitrary operating system commands on the controller. The flaw is rated CVSS 7.2 (High) with a vector of AV:N/AC:L/PR:H/UI:N, so exploitation is remote and low-complexity once the privileged foothold exists - the high-privilege requirement is the principal limiting factor and rules out unauthenticated attacks. No public exploit code or confirmed active exploitation is identified in the available data, though the sensitive nature of the RMC as a system-management plane makes exposure to untrusted networks a significant risk multiplier.
OS command injection on the Remote Management Controller (RMC) of HPE Compute Scale-up Server 3200/3250 and Superdome Flex / Flex 280 platforms allows an attacker who already holds high-privilege credentials on the RMC to run arbitrary operating system commands on the controller. The flaw is rated CVSS 7.2 (High) with a vector of AV:N/AC:L/PR:H/UI:N, so exploitation is remote and low-complexity once the privileged foothold exists - the high-privilege requirement is the principal limiting factor and rules out unauthenticated attacks. No public exploit code or confirmed active exploitation is identified in the available data, though the sensitive nature of the RMC as a system-management plane makes exposure to untrusted networks a significant risk multiplier.