HPE: 🗓️ 📅 Sep 4, 2026

HPE Security Advisory

Published Date: Not specified

Advisory Summary

### 📌 HPE StoreEasy Advisory: Local EoP in Intel Chipset Firmware (INTEL-SA-01372)
HPE has published HPESBHF05094 rev.1, an advisory covering HPE StoreEasy servers running on certain Intel processors, tied to the Intel Chipset Firmware Advisory INTEL-SA-01372. The issue addressed is a Local Escalation of Privilege (LPE) vulnerability, including the reference tags VRT0010 and VRT-related validation for affected configurations.

—

• Unauthorized access to stored data
• Persistence via privileged access paths
• Lateral movement to management or storage networks

—

• Systems are not at the recommended firmware level
• An attacker can achieve local execution (direct or via malware)
• Multi-tenant or shared administration models exist (greater chance of local access)

—

### 🔧 What Market Professionals Should Do (Action Checklist)
✅ 1) Identify affected StoreEasy models/processor platforms
Use the advisory to confirm whether your specific server SKU + Intel processor + current firmware posture is in scope.

✅ 2) Verify current chipset/firmware versions
Cross-check installed firmware against the “fixed / recommended” versions stated by HPE.

✅ 3) Plan and apply the HPE-recommended firmware updates
Coordinate maintenance windows—firmware updates can require reboots and should be validated in a staging environment first.

• Ensure endpoint/server hardening and least-privilege practices are enforced.
• Review for suspicious local activity that could precede an escalation attempt.

—

### ℹ️

-SA-01372

Reference: Vendor Advisory