Local Arbitrary Code Execution Vulnerability in HPE Integrated Lights-Out 5
CVE-2022-28640
8.8HIGH
Key Information:
- Vendor
HP
- Vendor
- CVE Published:
- 20 September 2022
What is CVE-2022-28640?
A vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) that allows local adjacent attackers to execute arbitrary code. This flaw could result in unauthorized access to sensitive information, posing risks to confidentiality, integrity, and availability of the system. Hewlett Packard Enterprise has released updated firmware to mitigate this security issue, emphasizing the need for users to promptly apply these updates to safeguard their environments.
Affected Version(s)
HPE Integrated Lights-Out 5 (iLO 5) Prior to 2.72
HPE Integrated Lights-Out 5 (iLO 5) = unspecified