Hewlett Packard Enterprise (HPE) has resolved a maximum-severity safety flaw in OneView Software program that, if efficiently exploited, may end in distant code execution.
The essential vulnerability, assigned the CVE identifier CVE-2025-37164, carries a CVSS rating of 10.0. HPE OneView is an IT infrastructure administration software program that streamlines IT operations and controls all techniques by way of a centralized dashboard interface.
“A possible safety vulnerability has been recognized in Hewlett Packard Enterprise OneView Software program. This vulnerability could possibly be exploited, permitting a distant unauthenticated consumer to carry out distant code execution,” HPE mentioned in an advisory issued this week.
It impacts all variations of the software program previous to model 11.00, which addresses the flaw. The corporate has additionally made obtainable a hotfix that may be utilized to OneView variations 5.20 via 10.20.
It is price noting that the hotfix should be reapplied after upgrading from model 6.60 or later to model 7.00.00, or after any HPE Synergy Composer reimaging operations. Separate hotfixes can be found for the OneView digital equipment and Synergy Composer2.
Though HPE makes no point out of the flaw being exploited within the wild, it is important that customers apply the patches as quickly as doable for optimum safety.
Earlier this June, the corporate additionally launched updates to repair eight vulnerabilities in its StoreOnce knowledge backup and deduplication answer that might end in an authentication bypass and distant code execution. It additionally shipped OneView model 10.00 to remediate a lot of recognized flaws in third-party parts, similar to Apache Tomcat and Apache HTTP Server.
Elevate your perspective with NextTech Information, the place innovation meets perception.
Uncover the newest breakthroughs, get unique updates, and join with a world community of future-focused thinkers.
Unlock tomorrow’s developments immediately: learn extra, subscribe to our publication, and grow to be a part of the NextTech neighborhood at NextTech-news.com
