CVE-2023-50274: Command Injection
Published Jan 23, 2024
·Updated
HPE OneView may allow command injection with local privilege escalation.
Affected Software
1 affected component
HP OneView<8.70
Event History
Jan 23, 2024
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-50274?
CVE-2023-50274 has been classified with a high severity level due to its potential for command injection and local privilege escalation.
2
How do I fix CVE-2023-50274?
To mitigate CVE-2023-50274, users should upgrade HPE OneView to version 8.70 or later.
3
What software is affected by CVE-2023-50274?
CVE-2023-50274 affects HPE OneView up to version 8.70.
4
What impact does CVE-2023-50274 have on systems?
CVE-2023-50274 can lead to unauthorized command execution and elevated privileges, compromising system security.
5
Is there a workaround for CVE-2023-50274?
Currently, there are no official workarounds for CVE-2023-50274 aside from upgrading to a patched version.