Remote Administration Vulnerability in Oracle Integrated Lights Out Manager

CVE-2024-20906

What is CVE-2024-20906?

A vulnerability exists in Oracle's Integrated Lights Out Manager (ILOM) that allows a high privileged attacker with network access to exploit the system through ICMP. While it resides within the ILOM, the impact can extend to additional products, posing significant risks. Successful exploitation requires human interaction from someone other than the attacker, leading to unauthorized access for data updates, inserts, or deletions. Additionally, attackers may gain unauthorized read access to critical ILOM data, highlighting the need for immediate security measures.

References