[security bulletin] HPESBHF03754 rev.1 - HPE ML10 Gen 9 Server using Intel Xeon E3-1200 v5 Processor, Remote Access Restriction Bypass

LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQpIYXNoOiBTSEEyNTYKCk5v
dGU6IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIGZvbGxvd2luZyBkb2N1bWVudCBp
cyBhdmFpbGFibGUgaGVyZToNCmh0dHBzOi8vaDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNj
L2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1lbXJfbmEtaHBlc2JoZjAzNzU0ZW5fdXMN
Cg0KU1VQUE9SVCBDT01NVU5JQ0FUSU9OIC0gU0VDVVJJVFkgQlVMTEVUSU4NCg0KRG9j
dW1lbnQgSUQ6IGhwZXNiaGYwMzc1NGVuX3VzDQpWZXJzaW9uOiAxDQoNCkhQRVNCSEYw
Mzc1NCByZXYuMSAtICBIUEUgTUwxMCBHZW4gOSBTZXJ2ZXIgdXNpbmcgSW50ZWwgWGVv
biBFMy0xMjAwIHY1DQpQcm9jZXNzb3IsIFJlbW90ZSBBY2Nlc3MgUmVzdHJpY3Rpb24g
QnlwYXNzDQoNCk5PVElDRTogVGhlIGluZm9ybWF0aW9uIGluIHRoaXMgU2VjdXJpdHkg
QnVsbGV0aW4gc2hvdWxkIGJlIGFjdGVkIHVwb24gYXMNCnNvb24gYXMgcG9zc2libGUu
DQoNClJlbGVhc2UgRGF0ZTogMjAxNy0wNS0yNg0KTGFzdCBVcGRhdGVkOiAyMDE3LTA1
LTI2DQoNClBvdGVudGlhbCBTZWN1cml0eSBJbXBhY3Q6IFJlbW90ZTogQWNjZXNzIFJl
c3RyaWN0aW9uIEJ5cGFzcw0KDQpTb3VyY2U6IEhld2xldHQgUGFja2FyZCBFbnRlcnBy
aXNlLCBQcm9kdWN0IFNlY3VyaXR5IFJlc3BvbnNlIFRlYW0NCg0KVlVMTkVSQUJJTElU
WSBTVU1NQVJZDQpBIHBvdGVudGlhbCBzZWN1cml0eSB2dWxuZXJhYmlsaXR5IGhhcyBi
ZWVuIGlkZW50aWZpZWQgaW4gSFBFIE1MMTAgR2VuIDkNClNlcnZlciB1c2luZyBJbnRl
bCBYZW9uIEUzLTEyMDAgdjUgUHJvY2Vzc29yLiBUaGUgdnVsbmVyYWJpbGl0eSBjb3Vs
ZCBiZQ0KcmVtb3RlbHkgZXhwbG9pdGVkIHRvIGFsbG93IGFjY2VzcyByZXN0cmljdGlv
biBieXBhc3MuDQoNCioqTm90ZToqKg0KT24gTWF5IDFzdCwgMjAxNywgSW50ZWwgZGlz
Y2xvc2VkIGEgbmV3IHZ1bG5lcmFiaWxpdHkgd2l0aCB0aGVpciBJbnRlbA0KTWFuYWdl
YWJpbGl0eSBGaXJtd2FyZSB3aGljaCBpcyB1dGlsaXplZCBvbiBzb21lIHN5c3RlbXMg
Y29udGFpbmluZyBJbnRlbA0KcHJvY2Vzc29ycy4gVGhpcyB2dWxuZXJhYmlsaXR5IGFs
bG93cyBhbiB1bnByaXZpbGVnZWQgbmV0d29yayBvciBsb2NhbA0KYXR0YWNrZXIgdG8g
Z2FpbiBjb250cm9sIG9mIHRoZSByZW1vdGUgbWFuYWdlYWJpbGl0eSBmZWF0dXJlcyBv
ZiBJbnRlbCBBY3RpdmUNCk1hbmFnZW1lbnQgVGVjaG5vbG9neSAoQU1UKSwgSW50ZWwg
U3RhbmRhcmQgTWFuYWdlYWJpbGl0eSAoSVNNKSwgYW5kIEludGVsDQpTbWFsbCBCdXNp
bmVzcyBUZWNobm9sb2d5IChTQlQpIHBsYXRmb3Jtcy4gIERvIG5vdCBhdHRlbXB0IHRv
IHVwZ3JhZGUgdGhlIE1FDQpGVyB3aXRob3V0IGZvbGxvd2luZyB0aGUgaW5zdHJ1Y3Rp
b25zIGRldGFpbGVkIGluIHRoZSBSZXNvbHV0aW9uIHNlY3Rpb24uDQpSZWZlciB0byB0
aGUgIlBsYXRmb3JtIFNwZWNpZmljIEluZm9ybWF0aW9uIiBzZWN0aW9uIGluIHRoZSBS
ZXNvbHV0aW9uIGZvcg0KbW9yZSBzcGVjaWZpYyBpbmZvcm1hdGlvbiBvbiB1cGdyYWRl
cyBmb3Igc3BlY2lmaWMgUHJvTGlhbnQgc2VydmVycy4NCg0KUmVmZXJlbmNlczoNCg0K
ICAtIENWRS0yMDE3LTU2ODkNCg0KU1VQUE9SVEVEIFNPRlRXQVJFIFZFUlNJT05TKjog
T05MWSBpbXBhY3RlZCB2ZXJzaW9ucyBhcmUgbGlzdGVkLg0KDQogIC0gSFBFIFByb0xp
YW50IE1MMTAgR2VuOSBFMy0xMjI1IHY1IDMuM0dIeiA0LWNvcmUgOEdCLVIgMVRCIE5v
bi1ob3QgUGx1Zw0KNExGRiBTQVRBIDMwMFcgQVAgU3ZyL1Byb21vIEdlbjkNCiAgLSBI
UEUgUHJvTGlhbnQgTUwxMCBHZW45IEUzLTEyMjUgdjUgNEdCLVIgMVRCIE5vbi1ob3Qg
UGx1ZyA0TEZGIFNBVEEgMzAwVw0KU3ZyL1MtQnV5IEdlbjkNCiAgLSBIUEUgUHJvTGlh
bnQgTUwxMCBHZW45IEUzLTEyMjUgdjUgOEdCLVIgMVRCIE5vbi1ob3QgUGx1ZyA0TEZG
IFNBVEEgMzAwVw0KUGVyZiBTdnIgR2VuOQ0KICAtIEhQRSBQcm9MaWFudCBNTDEwIEdl
bjkgRTMtMTIyNSB2NSA4R0ItUiAyVEIgTm9uLWhvdCBQbHVnIDRMRkYgU0FUQSAzMDBX
DQpTdnIvR08gR2VuOQ0KICAtIEhQRSBQcm9MaWFudCBNTDEwIEdlbjkgRTMtMTIyNSB2
NSA4R0ItUiAyVEIgTm9uLWhvdCBQbHVnIDRMRkYgU0FUQSAzMDBXDQpTdnIvVFYgR2Vu
OQ0KDQpCQUNLR1JPVU5EDQoNCiAgQ1ZTUyBCYXNlIE1ldHJpY3MNCiAgPT09PT09PT09
PT09PT09PT0NCiAgUmVmZXJlbmNlLCBDVlNTIFYzIFNjb3JlL1ZlY3RvciwgQ1ZTUyBW
MiBTY29yZS9WZWN0b3INCg0KICAgIENWRS0yMDE3LTU2ODkNCiAgICAgIDguMSBDVlNT
OjMuMC9BVjpML0FDOkgvUFI6Ti9VSTpOL1M6Qy9DOkgvSTpIL0E6SA0KICAgICAgNi4y
IChBVjpML0FDOkgvQXU6Ti9DOkMvSTpDL0E6QykNCg0KICAgIEluZm9ybWF0aW9uIG9u
IENWU1MgaXMgZG9jdW1lbnRlZCBpbg0KICAgIEhQRSBDdXN0b21lciBOb3RpY2UgSFBT
Ti0yMDA4LTAwMiBoZXJlOg0KDQpodHRwczovL2gyMDU2NC53d3cyLmhwZS5jb20vaHBz
Yy9kb2MvcHVibGljL2Rpc3BsYXk/ZG9jSWQ9ZW1yX25hLWMwMTM0NTQ5OQ0KDQpSRVNP
TFVUSU9ODQoNCkhQRSBoYXMgcHJvdmlkZWQgdGhlIGZvbGxvd2luZyByZXNvbHV0aW9u
IGZvciB0aGlzIGlzc3VlOiAgIA0KDQoqKk5vdGU6KiogT25seSB0aGUgUHJvTGlhbnQg
R2VuOSBzZXJ2ZXIgZGV0YWlsZWQgaW4gdGhlIGltcGFjdGVkIHByb2R1Y3QNCmluZm9y
bWF0aW9uIGFib3ZlIGNhbiBiZSB1cGdyYWRlZCB1c2luZyB0aGUgcHJvY2VkdXJlIGRl
c2NyaWJlZCBpbiB0aGlzDQpkb2N1bWVudC4gQmVmb3JlIGJlZ2lubmluZyB0aGUgdXBn
cmFkZSBwcm9jZXNzLCB0aGUgc2VydmVyIG11c3QgaGF2ZSBJbnRlbA0KWGVvbiBFMy0x
MjAwIHY1IHByb2Nlc3NvcnMgaW5zdGFsbGVkLiBTZWUgYmVsb3cgZm9yIGZ1cnRoZXIg
aW5zdHJ1Y3Rpb25zLiAgDQoNClVwZ3JhZGUgdG8gdGhlIGxhdGVzdCBTeXN0ZW0gUk9N
IGF2YWlsYWJsZSBmb3IgdGhlIHBsYXRmb3JtIHByaW9yIHRvDQp1cGdyYWRpbmcgdGhl
IE1FIGlzIHJlcXVpcmVkLiBTeXN0ZW0gUk9NIHdpbGwgbmVlZCAxLjA2IHZlcnNpb24g
b3IgbGF0ZXIgdG8NCnN1cHBvcnQgdGhpcyBNRSBmaXJtd2FyZS4gICANCg0KVGhlIHN5
c3RlbSBST00gdG9vbGtpdCBhbmQgZmlybXdhcmUgaW1hZ2UgY2FuIGJlIGZvdW5kIGF0
Og0KDQogKiBCSU9TIDEuMDYgKFdpbmRvd3MpDQo8aHR0cDovL2gyMDU2NC53d3cyLmhw
ZS5jb20vaHBzYy9zd2QvcHVibGljL2RldGFpbD9zcDR0cy5vaWQ9MTAwODc3MjE3NiZz
d0l0ZQ0KSWQ9TVRYXzBhMTA3NmY0YmYwNDQ0YTA5MGIwOWVlYjYyJnN3RW52T2lkPTQx
NjgjdGFiMT4gIA0KDQoqIEJJT1MgMS4wNiAoTGludXggNikNCjxodHRwOi8vaDIwNTY0
Lnd3dzIuaHBlLmNvbS9ocHNjL3N3ZC9wdWJsaWMvZGV0YWlsP3NwNHRzLm9pZD0xMDA4
NzcyMTc2JnN3SXRlDQpJZD1NVFhfMTRiYWNmMzVmMDg0NGJiNjk2ZWY2NTc5OWImc3dF
bnZPaWQ9NDEwMz4gIA0KDQogKiBCSU9TIDEuMDYgKExpbnV4IDcpDQo8aHR0cDovL2gy
MDU2NC53d3cyLmhwZS5jb20vaHBzYy9zd2QvcHVibGljL2RldGFpbD9zcDR0cy5vaWQ9
MTAwODc3MjE3NiZzd0l0ZQ0KSWQ9TVRYXzE0YmFjZjM1ZjA4NDRiYjY5NmVmNjU3OTli
JnN3RW52T2lkPTQxNzY+DQoNClRoZSBNRSB0b29sa2l0IGFuZCBmaXJtd2FyZSBpbWFn
ZSBjYW4gYmUgZm91bmQgYXQ6DQoNCiAqIE1FIDExLjYuMjcuMzI2NCAoV2luZG93cykN
CjxodHRwOi8vaDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNjL3N3ZC9wdWJsaWMvZGV0YWls
P3NwNHRzLm9pZD0xMDA4NzcyMTc2JnN3SXRlDQpJZD1NVFhfMzU5NDkxZDcyZmUwNGMw
Zjk0NjFmZDY1N2Qmc3dFbnZPaWQ9NDE2OD4NCg0KKiBNRSAxMS42LjI3LjMyNjQgKFVF
RkkpDQo8aHR0cDovL2gyMDU2NC53d3cyLmhwZS5jb20vaHBzYy9zd2QvcHVibGljL2Rl
dGFpbD9zcDR0cy5vaWQ9MTAwODc3MjE3NiZzd0l0ZQ0KSWQ9TVRYXzY3YTI3NTQwOGE5
YjQ1YWJhNzJhZDdjYmMxJnN3RW52T2lkPTQxNjg+DQoNCkhJU1RPUlkNClZlcnNpb246
MSAocmV2LjEpIC0gMjYgTWF5IDIwMTcgSW5pdGlhbCByZWxlYXNlDQoNClRoaXJkIFBh
cnR5IFNlY3VyaXR5IFBhdGNoZXM6IFRoaXJkIHBhcnR5IHNlY3VyaXR5IHBhdGNoZXMg
dGhhdCBhcmUgdG8gYmUNCmluc3RhbGxlZCBvbiBzeXN0ZW1zIHJ1bm5pbmcgSGV3bGV0
dCBQYWNrYXJkIEVudGVycHJpc2UgKEhQRSkgc29mdHdhcmUNCnByb2R1Y3RzIHNob3Vs
ZCBiZSBhcHBsaWVkIGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgY3VzdG9tZXIncyBwYXRj
aCBtYW5hZ2VtZW50DQpwb2xpY3kuDQoNClN1cHBvcnQ6IEZvciBpc3N1ZXMgYWJvdXQg
aW1wbGVtZW50aW5nIHRoZSByZWNvbW1lbmRhdGlvbnMgb2YgdGhpcyBTZWN1cml0eQ0K
QnVsbGV0aW4sIGNvbnRhY3Qgbm9ybWFsIEhQRSBTZXJ2aWNlcyBzdXBwb3J0IGNoYW5u
ZWwuIEZvciBvdGhlciBpc3N1ZXMgYWJvdXQNCnRoZSBjb250ZW50IG9mIHRoaXMgU2Vj
dXJpdHkgQnVsbGV0aW4sIHNlbmQgZS1tYWlsIHRvIHNlY3VyaXR5LWFsZXJ0QGhwZS5j
b20uDQoNClJlcG9ydDogVG8gcmVwb3J0IGEgcG90ZW50aWFsIHNlY3VyaXR5IHZ1bG5l
cmFiaWxpdHkgZm9yIGFueSBIUEUgc3VwcG9ydGVkDQpwcm9kdWN0Og0KICBXZWIgZm9y
bTogaHR0cHM6Ly93d3cuaHBlLmNvbS9pbmZvL3JlcG9ydC1zZWN1cml0eS12dWxuZXJh
YmlsaXR5DQogIEVtYWlsOiBzZWN1cml0eS1hbGVydEBocGUuY29tDQoNClN1YnNjcmli
ZTogVG8gaW5pdGlhdGUgYSBzdWJzY3JpcHRpb24gdG8gcmVjZWl2ZSBmdXR1cmUgSFBF
IFNlY3VyaXR5IEJ1bGxldGluDQphbGVydHMgdmlhIEVtYWlsOiBodHRwOi8vd3d3Lmhw
ZS5jb20vc3VwcG9ydC9TdWJzY3JpYmVyX0Nob2ljZQ0KDQpTZWN1cml0eSBCdWxsZXRp
biBBcmNoaXZlOiBBIGxpc3Qgb2YgcmVjZW50bHkgcmVsZWFzZWQgU2VjdXJpdHkgQnVs
bGV0aW5zIGlzDQphdmFpbGFibGUgaGVyZTogaHR0cDovL3d3dy5ocGUuY29tL3N1cHBv
cnQvU2VjdXJpdHlfQnVsbGV0aW5fQXJjaGl2ZQ0KDQpTb2Z0d2FyZSBQcm9kdWN0IENh
dGVnb3J5OiBUaGUgU29mdHdhcmUgUHJvZHVjdCBDYXRlZ29yeSBpcyByZXByZXNlbnRl
ZCBpbg0KdGhlIHRpdGxlIGJ5IHRoZSB0d28gY2hhcmFjdGVycyBmb2xsb3dpbmcgSFBT
Qi4NCg0KM0MgPSAzQ09NDQozUCA9IDNyZCBQYXJ0eSBTb2Z0d2FyZQ0KR04gPSBIUEUg
R2VuZXJhbCBTb2Z0d2FyZQ0KSEYgPSBIUEUgSGFyZHdhcmUgYW5kIEZpcm13YXJlDQpN
VSA9IE11bHRpLVBsYXRmb3JtIFNvZnR3YXJlDQpOUyA9IE5vblN0b3AgU2VydmVycw0K
T1YgPSBPcGVuVk1TDQpQViA9IFByb0N1cnZlDQpTVCA9IFN0b3JhZ2UgU29mdHdhcmUN
ClVYID0gSFAtVVgNCg0KQ29weXJpZ2h0IDIwMTYgSGV3bGV0dCBQYWNrYXJkIEVudGVy
cHJpc2UNCg0KSGV3bGV0dCBQYWNrYXJkIEVudGVycHJpc2Ugc2hhbGwgbm90IGJlIGxp
YWJsZSBmb3IgdGVjaG5pY2FsIG9yIGVkaXRvcmlhbA0KZXJyb3JzIG9yIG9taXNzaW9u
cyBjb250YWluZWQgaGVyZWluLiBUaGUgaW5mb3JtYXRpb24gcHJvdmlkZWQgaXMgcHJv
dmlkZWQNCiJhcyBpcyIgd2l0aG91dCB3YXJyYW50eSBvZiBhbnkga2luZC4gVG8gdGhl
IGV4dGVudCBwZXJtaXR0ZWQgYnkgbGF3LCBuZWl0aGVyDQpIUCBvciBpdHMgYWZmaWxp
YXRlcywgc3ViY29udHJhY3RvcnMgb3Igc3VwcGxpZXJzIHdpbGwgYmUgbGlhYmxlIGZv
cg0KaW5jaWRlbnRhbCxzcGVjaWFsIG9yIGNvbnNlcXVlbnRpYWwgZGFtYWdlcyBpbmNs
dWRpbmcgZG93bnRpbWUgY29zdDsgbG9zdA0KcHJvZml0czsgZGFtYWdlcyByZWxhdGlu
ZyB0byB0aGUgcHJvY3VyZW1lbnQgb2Ygc3Vic3RpdHV0ZSBwcm9kdWN0cyBvcg0Kc2Vy
dmljZXM7IG9yIGRhbWFnZXMgZm9yIGxvc3Mgb2YgZGF0YSwgb3Igc29mdHdhcmUgcmVz
dG9yYXRpb24uIFRoZQ0KaW5mb3JtYXRpb24gaW4gdGhpcyBkb2N1bWVudCBpcyBzdWJq
ZWN0IHRvIGNoYW5nZSB3aXRob3V0IG5vdGljZS4gSGV3bGV0dA0KUGFja2FyZCBFbnRl
cnByaXNlIGFuZCB0aGUgbmFtZXMgb2YgSGV3bGV0dCBQYWNrYXJkIEVudGVycHJpc2Ug
cHJvZHVjdHMNCnJlZmVyZW5jZWQgaGVyZWluIGFyZSB0cmFkZW1hcmtzIG9mIEhld2xl
dHQgUGFja2FyZCBFbnRlcnByaXNlIGluIHRoZSBVbml0ZWQNClN0YXRlcyBhbmQgb3Ro
ZXIgY291bnRyaWVzLiBPdGhlciBwcm9kdWN0IGFuZCBjb21wYW55IG5hbWVzIG1lbnRp
b25lZCBoZXJlaW4NCm1heSBiZSB0cmFkZW1hcmtzIG9mIHRoZWlyIHJlc3BlY3RpdmUg
b3duZXJzLg0KLS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251
UEcgdjEKCmlRRWNCQUVCQ0FBR0JRSlpLR2pYQUFvSkVMWGhBeHQ3U1phaXUzQUgvMmE5
N1F4MW1CZ2hYbG9EQVI0cENkV0UKcWlRVXZNWWZ0NXprMlVtUmdRcGc1ak9qRE1TQlFG
VFB0UHZWOXZCWXhoajBPcjQ5d0F5VERjdzFKZUc4SThoSQpCczlYREpYT1FYdmhUamRK
YWtwRy8rUElQc29Nd0poTm9IOUg0L3JXbjBpVUpiM3dqVERFb0hib05mU1JaaDBqCm1S
bEVwRG1jMTJzRFNsYWxKM0x5bWNYdC9abi82MnQxVkVybVFwM1FTZGxDanNTeHR0b1V2
Vnp6NnUycGxLUTAKdEpxYThtNzZ3UDJmem1JY0VwcjREcUhrU21BcUF5QVFFUGlWam1k
RFlZYUlOMXBpMUdLa2NJdTRXYkk3eDJ4WQpUank0Q1hSSFN5MzU3ZVB2M3pxd01ZZmw0
bmJRZSsxRms0elNOZjFpMThMUTlrTFdwNm1TUHFMTVY3a09ua289Cj1EUGhRCi0tLS0t
RU5EIFBHUCBTSUdOQVRVUkUtLS0tLQo=