A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us | Vendor Advisory |
Advertisement
Configurations
Configuration 1 (hide)
| AND |
|
Information
Published : 2022-08-12 08:15
Updated : 2022-08-16 07:40
NVD link : CVE-2022-28631
Mitre link : CVE-2022-28631
JSON object : View
CWE
Advertisement
Products Affected
hpe
- proliant_dl580_gen10_server
- proliant_xl290n_gen10_plus_server
- apollo_4200_gen10_server
- proliant_xl230k_gen10_server
- proliant_dx220n_gen10_plus_server
- proliant_dl180_gen10_server
- proliant_dl345_gen10_plus_server
- proliant_xl220n_gen10_plus_server
- proliant_dl325_gen10_plus_server
- proliant_dl325_gen10_plus_v2_server
- proliant_dl360_gen10_plus_server
- proliant_dl385_gen10_plus_server
- proliant_dx190r_gen10_server
- proliant_dx385_gen10_plus_server
- proliant_e910_server_blade
- apollo_2000_gen10_plus_system
- proliant_dl380_gen10_plus_server
- proliant_dx385_gen10_plus_v2_server
- proliant_ml110_gen10_server
- apollo_n2800_gen10_plus
- proliant_dl20_gen10_server
- apollo_r2600_gen10
- proliant_dl385_gen10_server
- proliant_dl380_gen10_server
- proliant_bl460c_gen10_server_blade
- apollo_r2800_gen10
- proliant_xl925g_gen10_plus_server
- apollo_4510_gen10_system
- proliant_dx380_gen10_server
- proliant_dl365_gen10_plus_server
- storage_performance_file_controller
- proliant_xl450_gen10_server
- proliant_dx360_gen10_plus_server
- proliant_dx380_gen10_plus_server
- edgeline_e920d_server_blade
- storeeasy_1560_storage
- proliant_dx170r_gen10_server
- proliant_dx4200_gen10_server
- proliant_dl110_gen10_plus_telco_server
- apollo_6500_gen10_plus_system
- proliant_dl360_gen10_server
- storeeasy_1660_expanded_storage
- proliant_dx360_gen10_server
- storeeasy_1660_performance_storage
- proliant_dl120_gen10_server
- proliant_xl225n_gen10_plus_1u_node
- proliant_dl160_gen10_server
- proliant_xl420_gen10_server
- storage_file_controller
- storeeasy_1660_storage
- integrated_lights-out_5_firmware
- edgeline_e920_server_blade
- storeeasy_1860_performance_storage
- proliant_dl325_gen10_server
- proliant_xl270d_gen10_server
- edgeline_e920t_server_blade
- apollo_n2600_gen10_plus
- storeeasy_1460_storage
- proliant_xl675d_gen10_plus_server
- proliant_m750_server_blade
- proliant_ml350_gen10_server
- proliant_dx325_gen10_plus_v2_server
- proliant_ml30_gen10_plus_server
- storeeasy_1860_storage
- proliant_microserver_gen10_plus
- proliant_xl190r_gen10_server
- proliant_dl385_gen10_plus_v2_server
- proliant_ml30_gen10_server
- proliant_dx560_gen10_server
- proliant_e910t_server_blade
- proliant_xl170r_gen10_server
- proliant_dl560_gen10_server
- proliant_xl645d_gen10_plus_server
- apollo_6500_gen10_system
- proliant_dl20_gen10_plus_server