HPE fixes critical zero-day vulnerability disclosed in December