Impact
A buffer overflow in HPE NonStop RDMA SERVICES NSK permits writing beyond the bounds of a memory buffer, resulting in corruption. This flaw can undermine system integrity, potentially leading to process crashes, denial of service, or even remote code execution depending on how the corrupted memory is exploited. The vulnerability is classified as CWE-787, indicating improper bounds checking of buffer writes.
Affected Systems
The vulnerability impacts the HPE NonStop RDMA SERVICES NSK service. Specific firmware or software release numbers are not provided, meaning that any deployment of this service may be vulnerable until a vendor remedial update is released.
Risk and Exploitability
The calculated CVSS score of 5.8 reflects moderate severity, while the EPSS score of less than 1% indicates a very low probability of exploitation in the wild. The issue is not listed in the CISA Known Exploited Vulnerabilities catalog, and no public exploitation reports are available. The most likely attack vector, inferred from the RDMA nature of the service, is a remote, network-based attack that would require an attacker to craft malicious RDMA packets targeting the vulnerable service. Given the low EPSS, widespread exploitation has not yet been observed, but the memory corruption risk still warrants prompt attention.
OpenCVE Enrichment