CVE-2022-28629

CVE-2022-28629 affects HP Integrated Lights-Out 5 (iLO 5) firmware before version 2.71. A local, low-privilege user can exploit this to execute arbitrary code, resulting in a full loss of confidentiality, integrity, and availability. Root cause indicated in connected docs is related to input hand...

CVE-2022-28629

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A low privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availabilit...

CVE-2022-28627

Affects HP Integrated Lights-Out 5 (iLO 5) firmware prior to version 2.71. An unprivileged local user can execute arbitrary code, resulting in a complete loss of confidentiality, integrity, and availability. HP has provided a firmware update to resolve this vulnerability (2.71). Multiple connecte...

CVE-2022-28627

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability...

CVE-2022-28628

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability...

CVE-2022-28628

CVE-2022-28628 concerns HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. A local, unprivileged user can exploit an arbitrary code execution vulnerability on affected iLO 5 implementations, potentially compromising confidentiality, integrity, and availability. The issue is tied to local...

CVE-2022-28626

CVE-2022-28626 concerns HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. A local arbitrary code execution vulnerability exists, exploitable by a highly privileged user with local access, leading to complete compromise of confidentiality, integrity, and availability. The issue is tied t...

CVE-2022-28626

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and...

PT-2022-19117 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered, allowing a low privileged user to execute arbitrary code, resulting in a complete loss of confidentiality, integrity,...

PT-2022-19120 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A potential arbitrary code execution and a denial of service DoS vulnerability were discovered in the firmware. An unprivileged user could exploit this vulnerability in an...

PT-2022-19119 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered, allowing an unprivileged user to execute arbitrary code, resulting in a complete loss of confidentiality and integrit...

PT-2022-19121 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A potential arbitrary code execution and a denial of service DoS vulnerability were discovered in the firmware. An unprivileged user could exploit this vulnerability in an...

PT-2022-19114 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware. A highly privileged user could locally exploit this vulnerabili...

PT-2022-19125 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A potential local arbitrary code execution and a local denial of service DoS vulnerability were discovered in the firmware. An unprivileged user could locally exploit this...

PT-2022-19123 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered, allowing a highly privileged user to execute arbitrary code, resulting in a complete loss of confidentiality,...

PT-2022-19116 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered, allowing an unprivileged user to execute arbitrary code, resulting in a complete loss of confidentiality, integrity,...

PT-2022-19115 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware. An unprivileged user could locally exploit this issue to execute...

EulerOS Virtualization 2.10.1 : samba (EulerOS-SA-2022-2066)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be...

Security Bulletin: IBM MQ for HPE NonStop Server is affected by OpenSSL vulnerability CVE-2022-0778

Summary An issue was identifed in OpenSSL when MQ is using it to parse certificates. Vulnerability Details CVEID: CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function when parsing certificates. By using a specially-crafted certificate...

Security Bulletin: IBM MQ for HPE NonStop Server is affected by OpenSSL vulnerability CVE-2021-4160

Summary MQ for HPE NonStop Server may be using weaker than expected security due to an algorithmic problem within OpenSSL. Vulnerability Details CVEID: CVE-2021-4160 DESCRIPTION: OpenSSL could provide weaker than expected security, caused by a carry propagation flaw in the MIPS32 and MIPS64...