VULNERABILITY INTELLIGENCE
CVE-2023-22755
CVSS score8.1 HIGH
EPSS probability1.07%
CISA KEVNot currently listed
Published2023-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Weakness classification
- nvd@nist.gov: CWE-120
Primary references
- security-alert@hpe.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory