CVE-2025-37088

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37088
A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 5.2

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04749en_us&docLocale=en_US
Configurations

No configuration.

History

25 Apr 2025, 15:15

Type Values Removed Values Added
CWE CWE-862 CWE-362
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 6.8

23 Apr 2025, 14:15

Type Values Removed Values Added
Summary
  • (es) Se ha identificado una vulnerabilidad de seguridad en HPE Cray Data Virtualization Service (DVS). Según las condiciones de carrera y la configuración, esta vulnerabilidad puede provocar acceso no autorizado local o del clúster.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CWE CWE-862

22 Apr 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-22 22:15

Updated : 2025-04-25 15:15

NVD link : CVE-2025-37088

Mitre link : CVE-2025-37088

CVE.ORG link : CVE-2025-37088

JSON object : View

Products Affected

No product.

CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')