Remote code execution

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality and integrity, and a partial...

Design/Logic Flaw

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file...

Remote code execution

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability...

Design/Logic Flaw

A potential local arbitrary code execution and a local denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitra...

Design/Logic Flaw

A potential arbitrary code execution and a denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute...

Design/Logic Flaw

A potential local arbitrary code execution and a local denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitra...

Remote code execution

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A low privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availabilit...

Hewlett Packard Enterprise Integrated Lights-Out 5 安全漏洞

Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution from Hewlett Packard Enterprise. The solution enables remote monitoring and operation of IT assets such as servers. A security vulnerability exists in Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5...

CVE-2022-28634

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and...

CVE-2022-28634

HPE Integrated Lights-Out 5 (iLO 5) firmware versions prior to 2.71 are affected by CVE-2022-28634. A local, highly privileged user could exploit this vulnerability to execute arbitrary code on the device, resulting in a complete loss of confidentiality, integrity, and availability. The issue is ...

CVE-2022-28633

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file...

CVE-2022-28633

CVE-2022-28633 affects HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. An unprivileged, local user can read and write to the iLO 5 firmware filesystem, resulting in complete loss of confidentiality and partial loss of integrity and availability. HPE provides a firmware update (2.71+) ...

CVE-2022-28635

A potential local arbitrary code execution and a local denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitra...

CVE-2022-28635

CVE-2022-28635 affects HPE iLO 5 firmware before 2.71. A local, unprivileged attacker could exploit an isolated process to execute arbitrary code and cause DoS within that process, impacting confidentiality, integrity, and availability of that process. The issue is tied to improper input handling...

CVE-2022-28636

A potential local arbitrary code execution and a local denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitra...

CVE-2022-28636

CVE-2022-28636 affects HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. An unprivileged user could locally exploit a vulnerability to execute arbitrary code within an isolated process and cause a DoS, with potential complete loss of confidentiality, integrity, and availability inside t...

CVE-2022-28632

CVE-2022-28632 affects HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. The vulnerability is described as an improper input validation that enables an unprivileged attacker on an adjacent network to potentially execute arbitrary code inside an isolated process, leading to loss of confi...

CVE-2022-28631

The CVE-2022-28631 issue affects HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. The vulnerability enables an unprivileged, adjacent-network attacker to potentially execute arbitrary code in an isolated process, leading to loss of confidentiality, integrity, and availability within th...

CVE-2022-28630

CVE-2022-28630 affects HPE iLO 5 firmware prior to 2.71. An unprivileged local user can exploit a local arbitrary code execution flaw to compromise confidentiality and integrity (complete loss) and partially affect availability, with user interaction required. Public detail across connected sourc...

CVE-2022-28629

CVE-2022-28629 affects HP Integrated Lights-Out 5 (iLO 5) firmware before version 2.71. A local, low-privilege user can exploit this to execute arbitrary code, resulting in a full loss of confidentiality, integrity, and availability. Root cause indicated in connected docs is related to input hand...