Oracle Integrated Lights Out Manager Vulnerability in Oracle Sun Systems
CVE-2017-10265
7.3HIGH
Key Information:
- Vendor
- Oracle
- Vendor
- CVE Published:
- 19 October 2017
Summary
The vulnerability in Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Exploitation can lead to unauthorized access and manipulation of accessible data, with the potential to execute unauthorized updates, insertions, or deletions. Additionally, the attacker may gain read access to confidential information and have the capability to initiate a partial denial of service. It's crucial for users and organizations to apply the necessary updates to safeguard their systems against such risks.
Affected Version(s)
SSM - (hot-tamale) ILOM: Integrated Lights Out Manager < 3.2.6
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved