CVE-2022-28633

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file...

CVE-2022-28635

CVE-2022-28635 affects HPE iLO 5 firmware before 2.71. A local, unprivileged attacker could exploit an isolated process to execute arbitrary code and cause DoS within that process, impacting confidentiality, integrity, and availability of that process. The issue is tied to improper input handling...

CVE-2022-28635

A potential local arbitrary code execution and a local denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitra...

CVE-2022-28636

A potential local arbitrary code execution and a local denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitra...

CVE-2022-28636

CVE-2022-28636 affects HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. An unprivileged user could locally exploit a vulnerability to execute arbitrary code within an isolated process and cause a DoS, with potential complete loss of confidentiality, integrity, and availability inside t...

CVE-2022-28632

CVE-2022-28632 affects HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. The vulnerability is described as an improper input validation that enables an unprivileged attacker on an adjacent network to potentially execute arbitrary code inside an isolated process, leading to loss of confi...

CVE-2022-28631

The CVE-2022-28631 issue affects HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. The vulnerability enables an unprivileged, adjacent-network attacker to potentially execute arbitrary code in an isolated process, leading to loss of confidentiality, integrity, and availability within th...

CVE-2022-28630

CVE-2022-28630 affects HPE iLO 5 firmware prior to 2.71. An unprivileged local user can exploit a local arbitrary code execution flaw to compromise confidentiality and integrity (complete loss) and partially affect availability, with user interaction required. Public detail across connected sourc...

CVE-2022-28629

CVE-2022-28629 affects HP Integrated Lights-Out 5 (iLO 5) firmware before version 2.71. A local, low-privilege user can exploit this to execute arbitrary code, resulting in a full loss of confidentiality, integrity, and availability. Root cause indicated in connected docs is related to input hand...

CVE-2022-28627

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability...

CVE-2022-28627

Affects HP Integrated Lights-Out 5 (iLO 5) firmware prior to version 2.71. An unprivileged local user can execute arbitrary code, resulting in a complete loss of confidentiality, integrity, and availability. HP has provided a firmware update to resolve this vulnerability (2.71). Multiple connecte...

CVE-2022-28628

CVE-2022-28628 concerns HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. A local, unprivileged user can exploit an arbitrary code execution vulnerability on affected iLO 5 implementations, potentially compromising confidentiality, integrity, and availability. The issue is tied to local...

CVE-2022-28626

CVE-2022-28626 concerns HPE Integrated Lights-Out 5 (iLO 5) firmware prior to 2.71. A local arbitrary code execution vulnerability exists, exploitable by a highly privileged user with local access, leading to complete compromise of confidentiality, integrity, and availability. The issue is tied t...

CVE-2022-28626

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and...

PT-2022-19120 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A potential arbitrary code execution and a denial of service DoS vulnerability were discovered in the firmware. An unprivileged user could exploit this vulnerability in an...

PT-2022-19123 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered, allowing a highly privileged user to execute arbitrary code, resulting in a complete loss of confidentiality,...

PT-2022-19122 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local disclosure of sensitive information and a local unauthorized data modification issue were discovered. An unprivileged user could locally exploit this to read and...

CVE-2022-23704

A potential security vulnerability has been identified in Integrated Lights-Out 4 iLO 4. The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 iLO 4 2.80 and later...

CVE-2022-23704

A potential security vulnerability has been identified in Integrated Lights-Out 4 iLO 4. The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 iLO 4 2.80 and later...

CVE-2022-23704

The CVE-2022-23704 entry concerns HPE Integrated Lights-Out 4 (iLO 4). The vulnerability could allow a remote Denial of Service and is addressed in iLO 4 versions 2.80 and later. Connected documents confirm this impact and the fixed version; no specific exploit details, affected subcomponents, or...