HPE Security Advisory
Published Date: June 25, 2026
Advisory Summary
Hewlett Packard Enterprise (HPE) has issued an updated security bulletin (HPESBHF05042 rev.2) addressing a critical vulnerability impacting certain HPE SimpliVity servers equipped with select AMD EPYC processors. The vulnerability, tracked as AMD-SB-3034, stems from a Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP) routing misconfiguration. This defect potentially allows a local attacker to compromise system integrity, posing significant risks for data center operators relying on these hyperconverged infrastructure systems.
The SEV-SNP technology is designed to enhance virtual machine security by encrypting memory and isolating workloads. However, this particular routing misconfiguration undermines that protection, enabling an adversary with local access to affect the trusted computing environment adversely. HPE’s bulletin provides detailed mitigation steps, including firmware updates and configuration guidance, imperative to apply promptly to safeguard these systems.
Organizations deploying HPE SimpliVity solutions on AMD EPYC platforms should prioritize reviewing this advisory to assess exposure and execute recommended patches to maintain infrastructure security and operational integrity.
Reference: Vendor Advisory