Description
A
vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote
attacker to cause a denial of service when traceroute is executed under
certain conditions.
Published: 2026-10-15
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Assess Impact
AI Analysis

Impact

A vulnerability in HPE NonStop TCP/IP UTILITIES allows an unauthenticated remote attacker to trigger a denial of service by executing traceroute under certain conditions. The flaw can halt the utility’s ability to respond to network traffic, resulting in a loss of connectivity for systems relying on the utilities for TCP/IP operations. The weakness is classified as CWE-306, indicating missing or insufficient security checks during processing.

Affected Systems

The issue affects Hewlett Packard Enterprise’s HPE NonStop TCP/IP UTILITIES. Specific product versions are not enumerated in the supplied data, so any installation of the utilities may be vulnerable until newer updates are applied.

Risk and Exploitability

The CVSS score of 5.3 reflects a moderate level of severity. Exploit probability is not available, and the vulnerability is not listed in the CISA KEV catalog. Because authentication is not required and the launch of traceroute can be performed remotely, the attack vector is likely remote from an external network. The impact is local to the affected HPE system and may persist until remediation is applied or the network is isolated.

Generated by OpenCVE AI on October 15, 2026 at 11:42 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply any available patch or newer version of HPE NonStop TCP/IP UTILITIES that resolves the traceroute denial of service.
  • Configure firewalls or network ACLs to block or limit traceroute traffic to trusted hosts only, preventing unauthorized execution.
  • Monitor system logs for anomalous traceroute invocations and respond promptly to any detected attempts to exploit the utilities.

Generated by OpenCVE AI on October 15, 2026 at 11:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Hpe
Hpe nonstop Tcp/ip Utilities
Vendors & Products Hpe
Hpe nonstop Tcp/ip Utilities

Thu, 15 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 15 Oct 2026 01:30:00 +0000

Type Values Removed Values Added
Description A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.
Title HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Subscriptions

Hpe Nonstop Tcp/ip Utilities
cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-15T15:24:09.343Z

Reserved: 2026-08-19T16:10:37.082Z

Link: CVE-2026-76656

cve-icon Vulnrichment

Updated: 2026-10-15T15:23:59.906Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-15T02:20:15.770

Modified: 2026-10-15T16:23:06.250

Link: CVE-2026-76656

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T20:23:37Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function