CVE-2020-7135

A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0, 2018.09.0, and 2018.11.0. The vulnerable software is the Supplemental Update / Online ROM Flash Component for Linux (x64) software. The installer in this software component could be locally exploited to execute arbitrary code. Drive Models can be found in the Vulnerability Resolution field of the security bulletin. The 2019_03 SPP and Supplemental update / Online ROM Flash Component for Linux (x64) after 2019.03.0 has fixed this issue.

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03945en_usVendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03945en_usVendor Advisory

Published

Apr 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7129A remote execution of arbitrary commands vulnerability was d…7.2
• CVE-2020-7130HPE OneView Global Dashboard (OVGD) 1.9 has a remote informa…7.5
• CVE-2020-7131This document describes a security vulnerability in Blade Ma…9
• CVE-2020-7132A potential security vulnerability has been identified in HP…5.4
• CVE-2020-7133A unauthorized remote access vulnerability was discovered in…9.8
• CVE-2020-7134A remote access to sensitive data vulnerability was discover…6.5
• CVE-2020-7136A security vulnerability in HPE Smart Update Manager (SUM) p…9.8
• CVE-2020-7137A validation issue in HPE Superdome Flex's RMC component may…6.7
• CVE-2020-7138Potential remote code execution security vulnerabilities hav…8.8
• CVE-2020-7139Potential remote access security vulnerabilities have been i…8.1
• CVE-2020-7140A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Do…6.1
• CVE-2020-7141A adddevicetoview expression language injection remote code …9.8