CVE-2026-73785

HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability

Published Sep 11, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).

Analysis

Technical impact

A remote, unauthenticated attacker can trigger a denial of service on the HPE IceWall Federation Agent and Proxy by abusing a weakness that permits arbitrary requests to overwhelm the service. The flaw is identified as CWE-241, indicating insufficient validation of input integrity. The resulting impact is service disruption for users relying on the affected component.

Affected Systems

The vulnerability affects Hewlett Packard Enterprise HPE IceWall products, specifically the Federation Agent and Proxy components. No specific version information is provided, so any deployed instances of these components could be susceptible.

Risk and Exploitability

The CVSS score of 7.5 classifies this flaw as high severity, reflecting a significant risk of disruption. Although EPSS data is missing and the vulnerability is not listed in CISA KEV, the reported attack vector is remote and unauthenticated, inferred from the description. An attacker could potentially craft requests to exhaust resources and halt the service, pending the presence of the unpatched component.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Hewlett Packard Enterprise

HPE IceWall products

unaffected

Version	Status	Constraints
`4.0`	affected	—

No data.

Vendor Product Versions

Hewlett Packard Enterprise

Hpe Icewall Products

Version	Status	Scheme	Platform
`4.0`	affected	generic	['windows', 'linux']

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update the HPE IceWall Federation Agent and Proxy to the latest patched release that addresses the denial of service flaw
Configure network access controls such as IP whitelisting or rate limiting to reduce exposure of the agent/proxy to unauthenticated traffic
Continuously monitor system and network logs for abnormal request patterns that may indicate exploitation attempts

Generated by OpenCVE AI on September 11, 2026 at 08:23 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.573% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu05147en_us&docLocale=en_US

History

Nov 10, 2026 9:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 13, 2026 8:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Hewlett Packard Enterprise Hewlett Packard Enterprise hpe Icewall Products
Vendors & Products		Hewlett Packard Enterprise Hewlett Packard Enterprise hpe Icewall Products

Sep 11, 2026 7:00 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).
Title		HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability
Weaknesses		CWE-241
References		https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu05147en_us&docLocale=en_US
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`