PT-2022-19127 · Hewlett Packard · Hpe Integrated Lights-Out 5+1
CVE-2022-28638
·
Published
2022-09-15
·
Updated
2022-09-23
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HPE Integrated Lights-Out 5 (iLO 5) version 2.71
Description
A local disclosure of information and potential local arbitrary code execution issue was discovered, which could lead to a loss of confidentiality, integrity, and availability. This issue could result in arbitrary code execution, disclosure of information, and denial of service (DoS).
Recommendations
For HPE Integrated Lights-Out 5 (iLO 5) version 2.71, update to the latest firmware provided by Hewlett Packard Enterprise to address these security issues.
Fix
DoS
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hpe Integrated Lights-Out 5
Hpe Ilo