CVE-2019-11983

7HIGH

Key Information:

Vendor
HP
Status
HPe Ilo4 And HPe Ilo5
Vendor
CVE Published:
5 June 2019

Summary

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

Affected Version(s)

HPE iLO4 and HPE iLO5 iLO4 prior to v2.61b and iLO5 prior to v1.39

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.