Remote Denial of Service Vulnerability in HPE Integrated Lights-Out 4
CVE-2022-23704

7.5HIGH

Key Information:

Vendor

HP
Status
HP Integrated Lights-out 4 (ilo 4)
Vendor
CVE Published:
9 May 2022

What is CVE-2022-23704?

A security vulnerability has been detected in HPE’s Integrated Lights-Out 4 (iLO 4), which could potentially allow unauthorized remote access to disrupt service. This remote Denial of Service (DoS) vulnerability affects devices running versions before 2.80. Users are advised to upgrade to the latest version to mitigate any risks associated with this vulnerability.

Affected Version(s)

HPE Integrated Lights-Out 4 (iLO 4) Prior to iLO 4 version 2.80

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.