What’s Vulnerable › Vulnerabilities

CVE-2024-51766: HPE NonStop DISK UTIL, Local Denial of Service vulnerability

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-22 · updated 2026-06-17
• Weakness: CWE-755

Description

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL (T9208) product. This vulnerability could be exploited to cause a denial of service (DoS) to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series.

Affected products

• Hewlett Packard Enterprise HPE NonStop DISK UTIL: from T9208L01 before L Series T9208L01^ACL; from T9208H01 before J Series T9208H01^ACK — fixed in J Series T9208H01^ACK, L Series T9208L01^ACL

How to fix

Upgrade to a fixed version: Hewlett Packard Enterprise HPE NonStop DISK UTIL J Series T9208H01^ACK, L Series T9208L01^ACL. Check the vendor advisory for mitigations.

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns04759en_us&docLocale=en_US

Get alerted when CVE-2024-51766 or the next vulnerability affects your stack