CVE-2025-37097 - Vulnerability Details - OpenCVE

A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00081.

Exploitation poc

Automatable yes

Technical Impact partial

Vendors	Products
Hpe	Insight Remote Support

Configuration 1 [-]

cpe:2.3:a:hpe:insight_remote_support:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2025-19614	A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US
https://www.tenable.com/security/research/tra-2025-15

History

Thu, 10 Jul 2025 16:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hpe Hpe insight Remote Support
CPEs		cpe:2.3:a:hpe:insight_remote_support::::::::
Vendors & Products		Hpe Hpe insight Remote Support

Tue, 01 Jul 2025 15:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-749
References		https://www.tenable.com/security/research/tra-2025-15
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 01 Jul 2025 14:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service
References		https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2025-07-01T14:06:43.175Z

Updated: 2025-07-01T14:27:32.630Z

Reserved: 2025-04-16T01:28:25.363Z

Link: CVE-2025-37097

Vulnrichment

Updated: 2025-07-01T14:22:49.076Z

NVD

Status : Analyzed

Published: 2025-07-01T14:15:38.537

Modified: 2025-07-10T15:37:31.510

Link: CVE-2025-37097

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-37097", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2025-04-16T01:28:25.363Z", "datePublished": "2025-07-01T14:06:43.175Z", "dateUpdated": "2025-07-01T14:27:32.630Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Insight Remote Support", "vendor": "Hewlett Packard Enterprise", "versions": [{"lessThan": "v7.15.0.646", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service<p></p>"}], "value": "A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service"}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2025-07-01T14:07:09.010Z"}, "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-749", "lang": "en", "description": "CWE-749 Exposed Dangerous Method or Function"}]}], "references": [{"url": "https://www.tenable.com/security/research/tra-2025-15", "tags": ["exploit"]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-07-01T14:27:28.227589Z", "id": "CVE-2025-37097", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-01T14:27:32.630Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-37097", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-01T14:27:28.227589Z"}}}], "references": [{"url": "https://www.tenable.com/security/research/tra-2025-15", "tags": ["exploit"]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-749", "description": "CWE-749 Exposed Dangerous Method or Function"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-01T14:22:49.076Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Hewlett Packard Enterprise", "product": "Insight Remote Support", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.15.0.646", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service", "supportingMedia": [{"type": "text/html", "value": "A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service<p></p>", "base64": false}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2025-07-01T14:07:09.010Z"}}}, "cveMetadata": {"cveId": "CVE-2025-37097", "state": "PUBLISHED", "dateUpdated": "2025-07-01T14:27:32.630Z", "dateReserved": "2025-04-16T01:28:25.363Z", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "datePublished": "2025-07-01T14:06:43.175Z", "assignerShortName": "hpe"}, "dataVersion": "5.1"}