Local Denial of Service and Code Execution Vulnerability in HPE iLO 5
CVE-2022-28637

7.8HIGH

Key Information:

Vendor
HP
Status
HP Integrated Lights-out 5 (ilo 5)
Vendor
CVE Published:
20 September 2022

Summary

A vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) that could enable local denial of service (DoS) and arbitrary code execution. This vulnerability presents significant risks, as it may compromise the confidentiality, integrity, and availability of affected systems. To mitigate these issues, Hewlett Packard Enterprise has released an updated firmware version specifically addressing these security vulnerabilities. Users are strongly advised to apply the update to safeguard their iLO 5 systems effectively.

Affected Version(s)

HPE Integrated Lights-Out 5 (iLO 5) Prior to 2.72

HPE Integrated Lights-Out 5 (iLO 5) = unspecified

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.