StoreVirtual Storage
cancel
Showing results for 
Search instead for 
Did you mean: 

P4500G2 - Spectre and Meltdown

SOLVED
Go to solution
VRZ-David
Occasional Contributor

P4500G2 - Spectre and Meltdown

Hi *,

are there any advisories / guidelines regarding HPE StoreVirtual Storage (in my case P4500 G2) and Meltdown or Spectre?

Cheers

David

6 REPLIES
Torsten.
Acclaimed Contributor

Re: P4500G2 - Spectre and Meltdown

I have not seen any so far.

IMHO the risk is a "bad" process spying the memory, but you cannot run a foreign process or a browser on such a storevirtual system, hence the risk should be low.

 

 

Since this is a Proliant G6 model, there will be probably no BIOS update ...


Hope this helps!
Regards
Torsten.

__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.

__________________________________________________
No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! thumb below!   
Kipp_Glover
Neighborhood Moderator
Solution

Re: P4500G2 - Spectre and Meltdown

HPE has posted information about this security issue on the HPE Vulnerability site:    www.hpe.com/info/security-alerts 

The Spectre and Meltdown issue is the top issue listed on this page.    You can click on a link to see the list of impacted products.     At the time of this post the HPE Storage products have not been added to this list.   They will be added shortly.  

For Store Virtual,  the product is not vulnerable -  The StoreVirtual product does not allow arbitrary code execution. 

I am an HPE Employee
VRZ-David
Occasional Contributor

Re: P4500G2 - Spectre and Meltdown

Thank you very much. That is the information I was looking for.

Kipp_Glover
Neighborhood Moderator

Re: P4500G2 - Spectre and Meltdown

Just a short follow-up,  the HPE Vulnerability site,  www.hpe.com/info/security-alerts has been updated with a list of impacted HPE Storage products.  

Cheers!
/Kipp

I am an HPE Employee
Ashwin-Scindhe
Occasional Contributor

Re: P4500G2 - Spectre and Meltdown

HPE Support recoomends to run a thrid party scanner to generate report to check for vulnerability.

Could anyone suggest any third party scanner and if have tested.

Torsten.
Acclaimed Contributor

Re: P4500G2 - Spectre and Meltdown

>> HPE Support recoomends to run a thrid party scanner 

Where did you get this information from?

Microsoft has a tool for windows, but you need to run it on the system itself.

This does not apply to a StoreVirtual system.


Hope this helps!
Regards
Torsten.

__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.

__________________________________________________
No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! thumb below!