Lucene search

[email protected]CVE-2023-30911

HistoryOct 18, 2023 - 6:15 p.m.

CVE-2023-30911

2023-10-1818:15:09

[email protected]

web.nvd.nist.gov

hpe

ilo

ilorest

dos

cve-2023-30911

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.

Affected configurations

NVD

Node

hpeintegrated_lights-out_5_firmwareRange<2.98

AND

hpeapollo_2000_systemMatch-

hpeapollo_4200_gen10_plus_systemMatch-

hpeapollo_4200_gen10_serverMatch-

hpeapollo_4510_gen10_systemMatch-

hpeapollo_6500_gen10_plus_systemMatch-

hpeapollo_6500_gen10_systemMatch-

hpeapollo_n2600_gen10_plusMatch-

hpeapollo_n2800_gen10_plusMatch-

hpeapollo_r2200_gen10Match-

hpeapollo_r2600_gen10Match-

hpeapollo_r2800_gen10Match-

hpeedgeline_e920_server_bladeMatch-

hpeedgeline_e920d_server_bladeMatch-

hpeedgeline_e920t_server_bladeMatch-

hpeproliant_bl460c_gen10_server_bladeMatch-

hpeproliant_dl110_gen10_plus_telco_serverMatch-

hpeproliant_dl160_gen10_serverMatch-

hpeproliant_dl180_gen10_serverMatch-

hpeproliant_dl20_gen10_plus_serverMatch-

hpeproliant_dl20_gen10_serverMatch-

hpeproliant_dl325_gen10_plus_serverMatch-

hpeproliant_dl325_gen10_plus_v2_serverMatch-

hpeproliant_dl345_gen10_plus_serverMatch-

hpeproliant_dl360_gen10_plus_serverMatch-

hpeproliant_dl360_gen10_serverMatch-

hpeproliant_dl365_gen10_plus_serverMatch-

hpeproliant_dl380_gen10_plus_serverMatch-

hpeproliant_dl380_gen10_serverMatch-

hpeproliant_dl385_gen10_plus_serverMatch-

hpeproliant_dl385_gen10_plus_v2_serverMatch-

hpeproliant_dl385_gen10_serverMatch-

hpeproliant_dl560_gen10_serverMatch-

hpeproliant_dl580_gen10_serverMatch-

hpeproliant_e910_server_bladeMatch-

hpeproliant_e910t_server_bladeMatch-

hpeproliant_m750_server_bladeMatch-

hpeproliant_microserver_gen10_plusMatch-

hpeproliant_microserver_gen10_plus_v2Match-

hpeproliant_ml110_gen10_serverMatch-

hpeproliant_ml30_gen10_plus_serverMatch-

hpeproliant_ml30_gen10_serverMatch-

hpeproliant_ml350_gen10_serverMatch-

hpeproliant_xl170r_gen10_serverMatch-

hpeproliant_xl190r_gen10_serverMatch-

hpeproliant_xl220n_gen10_plus_serverMatch-

hpeproliant_xl225n_gen10_plus_1u_nodeMatch-

hpeproliant_xl230k_gen10_serverMatch-

hpeproliant_xl270d_gen10_serverMatch-

hpeproliant_xl290n_gen10_plus_serverMatch-

hpeproliant_xl2x260w_gen10_serverMatch-

hpeproliant_xl645d_gen10_plus_serverMatch-

hpeproliant_xl675d_gen10_plus_serverMatch-

hpeproliant_xl925g_gen10_plus_1u_4-node_configure-to-order_serverMatch-

hpesynergy_480_gen10_compute_moduleMatch-

hpesynergy_480_gen10_plus_compute_moduleMatch-

hpesynergy_660_gen10_compute_moduleMatch-

Node

hpealletra_4110Match-

hpealletra_4120Match-

hpealletra_4140Match-

hpeproliant_dl110_gen11Match-

hpeproliant_dl20_gen11Match-

hpeproliant_dl320_gen11_serverMatch-

hpeproliant_dl325_gen11_serverMatch-

hpeproliant_dl345_gen11_serverMatch-

hpeproliant_dl360_gen11_serverMatch-

hpeproliant_dl365_gen11_serverMatch-

hpeproliant_dl380_gen11_serverMatch-

hpeproliant_dl380a_gen11Match-

hpeproliant_dl385_gen11_serverMatch-

hpeproliant_dl560_gen11Match-

hpeproliant_ml110_gen11Match-

hpeproliant_ml30_gen11Match-

hpeproliant_ml350_gen11_serverMatch-

hpeproliant_rl300_gen11Match-

hpesynergy_480_gen11_compute_moduleMatch-

AND

hpeintegrated_lights-out_6_firmwareRange<1.53

CPENameOperatorVersion
hpe:integrated_lights-out_5_firmwarehpe integrated lights-out 5 firmwarelt2.98

CPE	Name	Operator	Version
hpe:integrated_lights-out_5_firmware	hpe integrated lights-out 5 firmware	lt	2.98

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HPE Integrated Lights-Out",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "lessThan": "iLO 5 v2.98",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "iLO 6 v1.53",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04544en_us

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for CVE-2023-30911

cvelist1 nvd1 prion1