Local Denial of Service and Code Execution Vulnerability in HPE iLO 5
CVE-2022-28637
7.8HIGH
Key Information:
- Vendor
HP
- Vendor
- CVE Published:
- 20 September 2022
What is CVE-2022-28637?
A vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) that could enable local denial of service (DoS) and arbitrary code execution. This vulnerability presents significant risks, as it may compromise the confidentiality, integrity, and availability of affected systems. To mitigate these issues, Hewlett Packard Enterprise has released an updated firmware version specifically addressing these security vulnerabilities. Users are strongly advised to apply the update to safeguard their iLO 5 systems effectively.
Affected Version(s)
HPE Integrated Lights-Out 5 (iLO 5) Prior to 2.72
HPE Integrated Lights-Out 5 (iLO 5) = unspecified