Remote Administration Vulnerability in Oracle Integrated Lights Out Manager

CVE-2024-20906

What is CVE-2024-20906?

A vulnerability exists in Oracle's Integrated Lights Out Manager (ILOM) that allows a high privileged attacker with network access to exploit the system through ICMP. While it resides within the ILOM, the impact can extend to additional products, posing significant risks. Successful exploitation requires human interaction from someone other than the attacker, leading to unauthorized access for data updates, inserts, or deletions. Additionally, attackers may gain unauthorized read access to critical ILOM data, highlighting the need for immediate security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References