HPESBHF04012 rev.7 - HPE ProLiant Servers, Apollo Products, and Converged Systems with Integrated Lights-Out 5 (iLO 5), Integrated Lights-Out 4 (iLO 4), or Integrated Lights-Out 3 (iLO 3), Ripple20 Multiple Vulnerabilities

🗓️ 13 Jul 2020 00:00:00Reported by hpeType

hpe🔗 support.hpe.com👁 34 Views

Ripple20 vulnerabilities affect HPE iLO 3/4/5 and converged systems on Gen10 and ProLiant servers.

Reporter	Title	Published	Views	Family All 134
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Treck Tcp\/Ip	30 Nov 202218:44	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Treck Tcp\/Ip	21 Jul 202003:38	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Treck Tcp\/Ip	15 Jun 202611:11	–	githubexploit
attackerkb	Ripple20 Treck TCP/IP Stack Vulnerabilities	21 Dec 202000:00	–	attackerkb
Tenable Nessus	ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)	30 Jun 202100:00	–	nessus
Tenable Nessus	Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 (cisco-sa-treck-ip-stack-JyBQ5GyC)	12 Aug 202000:00	–	nessus
Tenable Nessus	HP iLO 3 < 1.93 / HP iLO 4 < 2.75 / HP iLO Superdome 4 < 1.64 / HP iLO 5 < 2.18 / HP Moonshot/Edgeline iLO 5 < 2.30 Ripple20 Multiple vulnerabilities	24 Sep 202000:00	–	nessus
Tenable Nessus	Treck TCP/IP stack multiple vulnerabilities. (Ripple20)	22 Jun 202000:00	–	nessus
BDU FSTEC	Trace TCP/IP Protocol Stack Memory Leak DoS	16 Apr 202100:00	–	bdu_fstec
BDU FSTEC	Trace TCP/IP Protocol Stack Code Execution	16 Apr 202100:00	–	bdu_fstec

25 Mar 2021 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 29.3

CVSS 3.110

EPSS0.36852

Ripple20 vulnerabilities Integrated Lights Out Generation ten servers ProLiant servers Converged systems