PT-2022-19130 · Hewlett Packard · Hpe Integrated Lights-Out 5+1
CVE-2022-28640
·
Published
2022-09-15
·
Updated
2022-09-23
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HPE Integrated Lights-Out 5 (iLO 5) version 2.71
Description
A potential local adjacent arbitrary code execution issue was discovered, which could lead to a loss of confidentiality, integrity, and availability. This issue could potentially result in arbitrary code execution, disclosure of information, and denial of service (DoS).
Recommendations
For HPE Integrated Lights-Out 5 (iLO 5) version 2.71, update to the latest firmware provided by Hewlett Packard Enterprise to address this security issue.
Fix
DoS
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hpe Integrated Lights-Out 5
Hpe Ilo