Operational Defect Database
BugZero found this defect 3498 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
Hewlett Packard Enterprise | c04487669
Notice: HP Networking Communication - GNU Bash "Shellshock" Vulnerability
Last update date:
2/13/2024
Affected products:
Aruba VAN SDN Controller Software
HPE Intelligent Management Center Basic Software Platform
HPE Intelligent Management Center Basic WLAN Manager Software Platform
HPE Intelligent Management Center Enterprise Software Platform
HPE Intelligent Management Center Standard Software Platform
HPE PCM Network Management Software Series
HPE 6120G/XG Ethernet Blade Switch
HPE 6120XG Ethernet Blade Switch
HPE 6125G Ethernet Blade Switch
HPE 6125G/XG Ethernet Blade Switch
HPE Aruba Networking IMC Software
HPE PCM Plus Network Management Software Licenses
Affected releases:
No affected releases provided.
Fixed releases:
No fixed releases provided.
Description:
Info
Since September 24, 2014 HP Networking support has been receiving notifications of vulnerabilities in the open-source and widely used GNU Bash shell: CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187. These GNU Bash shell vulnerabilities are commonly referred to as "Shellshock" in public media. See the references section below for link to National Vulnerability Database entry describing vulnerability in detail.
Scope
None
Resolution
None
