NPCC Security Bulletin: Hewlett Packard Enterprise (HPE) Releases Update Addressing Critical Zero-Day Vulnerability in Systems Insight Manager (SIM)

The NPCC Security Bulletin is onHewlett Packard Enterprise (HPE) Releases Update Addressing Critical Zero-Day Vulnerability in Systems Insight Manager (SIM).

NPCC is publishing this security bulletin to engage and inform NPCC entities on aspects of Bulk Power System security and reliability

TPL: WHITE

Hewlett Packard Enterprise (HPE) Releases Update Addressing Critical Zero-Day Vulnerability in Systems Insight Manager (SIM)

HPE has released a software update to resolve the vulnerability in the HPE Systems Insight Manager (SIM) for Windows. This potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution. The CVE for this vulnerability is CVE-2020-7200 and has been assigned a CVSS V3 Base Score of 9.8 Critical.

HPE Systems Insight Manager 7.6

• Link: HPE Systems Insight Manager - Software and Hotfix Downloads

HPE Systems Insight Manager Prior to version 7.6

• Link: Apply this Workaround