Description:

HPE has released security updates to address multiple vulnerabilities in the following products:

• HPE 8Gb PCIe Host Bus Adapters
  • HPE 81E 8Gb 1-Port PCIe Fibre Channel Host Bus Adapter
  • HPE 81E 8Gb 1-Port PCIe Fibre Channel Host Bus Adapter/S-Buy
  • HPE 82E 8Gb 2-Port PCIe Fibre Channel Host Bus Adapter
  • HPE 82E 8Gb 2-Port PCIe Fibre Channel Host Bus Adapter/S-Buy
  • HPE StoreFabric 84E 4P 8Gb Fibre Channel Host Bus Adapter
• HPE SN1100E 16Gb Host Bus Adapter
  • HPE SN1100E 16Gb Single Port Fibre Channel Host Bus Adapter
  • HPE SN1100E 16Gb Dual Port Fibre Channel Host Bus Adapter
  • HPE SN1100E 4-port 16Gb Fibre Channel Host Bus Adapter
  • HPE StoreFabric SN1100E 16Gb Single Port Fibre Channel Host Bus Adapter
  • HPE StoreFabric SN1100E 16Gb Single Port Fibre Channel Host Bus Adapter/S-Buy
  • HPE StoreFabric SN1100E 16Gb Dual Port Fibre Channel Host Bus Adapter
  • HPE StoreFabric SN1100E 16Gb Dual Port Fibre Channel Host Bus Adapter/S-Buy
  • HPE StoreFabric SN1100E 4-port 16Gb Fibre Channel Host Bus Adapter
• HPE SN1200E 16Gb Fibre Channel Host Bus Adapter
  • HPE SN1200E 16Gb Single Port Fibre Channel Host Bus Adapter
  • HPE SN1200E 16Gb Dual Port Fibre Channel Host Bus Adapter
  • HPE StoreFabric SN1200E 16Gb Single Port Fibre Channel Host Bus Adapter
  • HPE StoreFabric SN1200E 16Gb Dual Port Fibre Channel Host Bus Adapter
• HPE SN1600E 32Gb Fibre Channel Host Bus Adapter
  • HPE SN1600E 32Gb Single Port Fibre Channel Host Bus Adapter
  • HPE SN1600E 32Gb Dual Port Fibre Channel Host Bus Adapter
  • HPE StoreFabric SN1600E 32Gb Single Port Fibre Channel Host Bus Adapter
  • HPE StoreFabric SN1600E 32Gb Dual Port Fibre Channel Host Bus Adapter
• HPE SN1610E 32Gb Fibre Channel Host Bus Adapter
  • HPE SN1610E 32Gb 1-port Fibre Channel Host Bus Adapter
  • HPE SN1610E 32Gb 2-port Fibre Channel Host Bus Adapter
• HPE SN1700E 64Gb Fibre Channel Host Bus Adapter
  • HPE SN1700E 64Gb 1-port Fibre Channel Host Bus Adapter
  • HPE SN1700E 64Gb 2-port Fibre Channel Host Bus Adapter
• HPE LPe1205A 8Gb Fibre Channel Host Bus Adapter for BladeSystem c-Class
• HPE LPe1605 16Gb Fibre Channel Host Bus Adapter for BladeSystem c-Class
• HPE Synergy 3530C 16Gb Fibre Channel Host Bus Adapter
• HPE Synergy 5330C 32Gb Fibre Channel Host Bus Adapter

Threats:

An attacker could exploit these vulnerabilities by doing the following:

• Buffer overflow
• Unauthorized modification
• Remote arbitrary code execution

Best practice and Recommendations:

The CERT team encourages users to review HPE security advisory and apply the necessary updates:

• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbst04210en_us
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbst04210en_us