HPE: Security Advisory: HPE SimpliVity AMD Servers Vulnerable to ASP Memory Access Flaw

HPE Security Advisory

Published Date: June 17, 2026

Advisory Summary

HPE has released an important update addressing a security vulnerability identified as AMD-SB-3039 impacting certain HPE SimpliVity servers that utilize specific AMD EPYC processors. The issue relates to the AMD Secure Processor’s (ASP) non-coherent memory access, which could potentially allow unauthorized memory operations, raising serious security implications for virtualized environments relying on these appliance servers.

This vulnerability, tracked as HPESBHF05071 rev.1 by HPE, calls for immediate attention from IT infrastructure teams managing HPE SimpliVity platforms with AMD EPYC CPUs to apply the recommended patches and firmware updates. Failure to remediate may expose critical workloads to risks of data breach or integrity compromise due to this processor-level flaw.

Organizations leveraging AMD EPYC-based SimpliVity nodes should prioritize vulnerability assessment and mitigation to maintain the security posture and trustworthiness of their hyper-converged infrastructure deployments.

Reference: Vendor Advisory