HPESBHF04133 rev.2 - HPE ProLiant Servers, Apollo Products, Moonshot and Edgeline Blades, and Storage Products with Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to version 2.44 HPE 3PAR Service Processor ...

HPESBHF04121 rev.1 - HPE ProLiant Servers, Apollo Products, and Storage Products with Integrated Lights-Out 4 (iLO 4), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 - Prior to version 2.78 HPE ProLiant BL460c Gen9 Server Blade - Prior to...

HPESBHF04130 rev.2 - HPE Synergy Systems with Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen9 Compute Module - Prior to HPE Synergy Service Pack SSP 2021.05.01 HPE Synergy 480 Gen1...

HPESBHF04147 rev.1 - HPE Synergy Gen10/Gen10 Plus, GRUB2 Secure Boot Vulnerability, Local Execution of Arbitrary Code

Potential Security Impact: Local: Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intelligent Provisioning - Prior to IP 3.62 for Gen10/Gen10 Plus, prior to IP 2.84 for Gen9 Scripting Toolkit for Linux - Prior to Scripting Toolkit for Linux 11.5121 Apr...

HPESBHF04134 rev.1 - HPE SimpliVity using HPE Integrated Lights-Out 5 (iLO 5) and HPE Integrated Lights-Out 4 (iLO 4), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers -Prior to version 2.44 HPE Integrated Lights-Out 4...

HPESBST04137 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.2.3, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Unauthorized Write Access to the File System; Remote: Denial of Service DoS, Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 16Gb Fibre Channel SAN Switch for HPE Synergy - Prior to 8.2...

HPESBST04139 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v9.0.1a, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Unauthorized Write Access to the File System; Remote: Authentication Bypass, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 32Gb Fibre Channel SAN Switch...

HPESBST04135 rev.1 - HPE B-Series SANnav Management Portal, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information, Disclosure of Sensitive Information, Unauthorized Access to Files, Unauthorized Information Disclosure, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav...

HPESBNW04145 rev.4 - Aruba Instant Access Points, ArubaOS Access Points when Managed by Mobiltity Controllers, Aruba Instant On, Aruba UXI Sensors, 802.11 Frame Aggregation and Fragmentation Vulnerabilities

Potential Security Impact: Remote: Disclosure of Sensitive Information, Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 1XX Series Campus Access Points - Prior to 6.5.4.19, 6.5.4.20, 8.3.0.15, 8.3.0.16, 8.5.0.12, 8.5.0.13, 8.6.0.8, 8.6.0.9, 8.7.1....

HPESBGN04129 rev.1 - HPE iLO Amplifier Pack using Bootstrap Framework, Remote Code Execution and Cross Site Scripting (XSS)

Potential Security Impact: Remote: Code Execution, Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to Version 1.90 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-10735 |...

HPESBGN04124 rev.4 - HPE Edgeline Infrastructure Manager, Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to version 1.23 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29203 |...

HPESBUX04128 rev.1 - HP-UX BIND, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Multiple Vulnerabilities, Unauthorized Access, Unauthorized Identification of Valid Users, Buffer Overflow, Access of Resource Using Incompatible Type 'Type Confusion' CWE-843; Remote: Denial of Service DoS, Unauthorized Access, Buffer...

HPESBNW04126 rev.2 - Aruba AirWave Management Platform, Multiple Vulnerabilities

Potential Security Impact: Remote: Escalation of Privilege, SQL Injection, URL Redirection, Unauthorized Access, Authentication Restriction Bypass, XML External Entity XXE, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform -...

HPESBNW04127 rev.2 - Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege; Remote: Arbitrary Command Execution, Cross-Site Scripting XSS, Disclosure of Privileged Information, Server-Side Request Forgery SSRF, XML External Entity XXE SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass...

HPESBHF04091 rev.1 - HPE Intel 700-DA series Ethernet Controllers, Local Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port FLR-SFP+ X710-DA2 Adapter -Prior to Version 10.54.7 HPE Ethernet 10Gb 2-port SFP+ X710-DA2 Adapter -Prior to Version 10.54.7 Intel X710-DA2 Ethernet...

HPESBHF04116 rev.3 - HPE Gen10 and Gen10 Plus Servers, GRUB2 Secure Boot Vulnerability, Local Execution of Arbitrary Code

Potential Security Impact: Local: Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VMware Upgrade Pack VUP 1.4.1, VUP 1.4.2 - See link to Software Delivery Repository - vibsdepot in Resolution Scripting Toolkit for Linux - Prior to version 11.5121 Apr 20...

HPESBGN04086 rev.1 - HPE IceWall SSO Domain Gateway, Remote Cross Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dgfw 10.0 RHEL, HP-UX, Windows and 11.0 Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26582 |...

HPESBST04115 rev.2 - HPE SimpliVity Systems using VMware - Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 - depends on ESXi version see HPE SimpliVity OmniStack Interoperability Guide HPE SimpliVity 2600 Gen10 - depends on ESXi version see HPE SimpliVity OmniStack...

HPESBUX04114 rev.1 - HP-UX 11iv3 Tomcat-based Servlet Engine7.0.104.01. Multiple Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Privileged Information; Remote: Code Execution, Denial of Service DoS, Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Tomcat-based Servlet v.7.x Engine D.7.0.104.01 a...

HPESBHF04102 rev.2 - HPE Superdome Flex and Superdome Flex 280 BMC web interface vulnerability, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to version 3.30.142 HPE Superdome Flex 280 Server - Prior to version 1.10.272 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --...

HPESBHF04103 rev.1 - HPE Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5) or Integrated Lights-Out 4 (iLO 4), Ripple20 Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers -Prior to v2.18 - Please see the RESOLUTI...

HPESBHF04106 rev.1 - HPE Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5) or Integrated Lights-Out 4 (iLO 4), Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers -Prior to v2.33 - Please see the RESOLUTION note HPE Integrated Lights-Out 4 iLO 4 -Prior to v2.77 - Please see the RESOLUTI...

HPESBHF04087 rev.1 - HPE Integrated Lights-Out 5 (iLO 5) for the Moonshot and Edgeline HPE ProLiant m750 Server Blade, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade - Prior to iLO 5 v2.32 for Moonshot/Edgeline CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7202 |...

HPESBHF04105 rev.1 - HPE Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5) or Integrated Lights-Out 4 (iLO 4), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.33 - Please see the RESOLUTION note HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.77 - Please see th...

HPESBGN04107 rev.2 - HPE iLO Amplifier Pack, Remote Cross-Site Scripting (XSS) Vulnerability

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.95 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26580 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:...

HPESBGN04109 rev.1 - HPE iLO Amplifier Pack, Multiple Remote Cross-Site Scripting (XSS) Vulnerabilities

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.80 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-11022 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

HPESBGN04108 rev.1 - HPE iLO Amplifier Pack, Remote Cross-Site Scripting (XSS) Vulnerability

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.80 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-7103 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

HPESBST04098 rev.1 - HPE B-Series SANnav Management Portal, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software - Prior to version 2.1.0a CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-15379 |...

HPESBMU04112 rev.1 - HPE Unified Data Management (UDM), Local Disclosure of Privileged Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Data Management UDM Versions 1.2009.0 and 1.2101.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26579 |...

HPESBNW04111 rev.2 - Aruba Instant Access Points, ArubaOS Mobility Conductor, Mobility Controllers, Access Points when Managed by Mobility Controllers, and SD-WAN Gateways, SAD DNS Side Channel Attack Leading to Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 7000 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.14, 8.5.0.11, 8.6.0.7, 8.7.1.1 and below Aruba 7200 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.1...

HPESBNW04100 rev.4 - Aruba Instant (IAP), Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Arbitrary File Download, Arbitrary File Modification, Code Execution, Cross-Site Scripting XSS, Denial of Service DoS, Execution of Arbitrary Commands, Unauthenticated Arbitrary Code Execution, Unauthorized Disclosure of Information...

HPESBGN04097 rev.1 - Hewlett Packard Enterprise Network Orchestrator (NetO), Remote SQL Injection Vulnerability

Potential Security Impact: Remote: SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Orchestrator -Prior to Version 2.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26578 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5...

HPESBST04094 rev.1 - HPE SimpliVity OmniStack and OmniCube, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 Gen10 - depends on ESXi version see interop guide HPE SimpliVity 380 Gen10 - depends on ESXi version see interop guide HPE SimpliVity 380 Gen10 G - depends on ESXi...

HPESBHF04096 rev.1 - HPE Synergy Composer2, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy Composer2 - Prior to HPE Synergy Software Release: Composer 6.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-27337 |...

HPESBUX04095 rev.1 - HP-UX Internet Express Software, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Internet Express System Software A.20.00-A.23.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

HPESBNW04092 rev.2 - Aruba Mobility Controllers, Aruba Access Points when managed by Mobility Controllers, Aruba SD-WAN Gateways, and Aruba Instant Access Points, Multiple Remote Vulnerabilities in dnsmasq

Potential Security Impact: Remote: Compromise of System Integrity, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 2XX Series Campus Access Points All versions Aruba 3XX Series Campus Access Points All versions Aruba 7000 Series Mobility Controllers...

HPESBNW04090 rev.3 - Aruba AirWave Management Platform, Multiple Vulnerabilities

Potential Security Impact: Remote: Cross-Site Request Forgery CSRF, Cross-Site Scripting XSS, SQL Injection, Unauthorized Access, Authentication Restriction Bypass, XML External Entity XXE SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform - Prior to...

HPESBNW04089 rev.2 - Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Escalation of Privilege, Execution of Arbitrary Commands, Unauthenticated Arbitrary Code Execution, Unauthorized Access, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Polic...

HPESBNS04081 rev.1 - HPE Web ViewPoint Suite, Remote Unauthorized Access

Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint T0320 - L, J and H series Web ViewPoint Plus T0952 - L, J and H series Web ViewPoint Enterprise T0986 - L, J and H series CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04080 rev.1 - HPE Apollo 70 System's Baseboard Management Controller (BMC) firmware have multiple local vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Directory Traversal, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 70 System -Prior to Version 3.0.14.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25142 |...

HPESBHF04084 rev.1 - HPE Moonshot Provisioning Manager, Remote Buffer Overflow in khuploadfile.cgi

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager v1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25139 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | 7.3 |...

HPESBHF04085 rev.1 - HPE Moonshot Provisioning Manager, Remote Directory Traversal in khuploadfile.cgi

Potential Security Impact: Remote: Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager Version: 1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25140 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

HPESBNW04083 rev.2 - HPE and Aruba L2/L3 Switches, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 5400R zl2 Switch Series - Prior to KB.16.10.0012, KB.16.09.0015, KB.16.08.0019 Aruba 3810M Switch Series - Prior to KB.16.10.0012, KB.16.09.0015, KB.16.08.0019 Aruba 2930M...

HPESBNW04082 rev.1 - HPE and Aruba L2/L3 Switches, Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 5400R zl2 Switch Series - Prior to KB.16.10.0012 Aruba 3810M Switch Series - Prior to KB.16.10.0012 Aruba 2930M Switch Series - Prior to WC.16.10.0012 Aruba 2930F Switch...

HPESBNS04076 rev.1 - HPE Web ViewPoint Suite, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Disclosure of Sensitive Information, Unauthorized Access to Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint Enterprise T0986 - L, J and H series Web ViewPoint Plus T0952 - L, J and H series Web ViewPoint T0320 ...

HPESBHF04079 rev.2 - HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) for Moonshot and Edgeline Cartridges and Blades, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade - Prior to iLO 5 v2.32 for Moonshot/Edgeline HPE ProLiant m710x Server Blade - Prior to iLO 4 v2.61 for Moonshot/Edgeline HPE ProLiant m710x-L Server...

HPESBHF04073 rev.1 - HPE Cloudline BMC firmware, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Directory Traversal, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloudline CL5800 Gen10 Server Version 1.08.0.0 HPE Cloudline CL3100 Gen10 Server Version 1.10.0.0 - Version 1.08.0.0 for Cascade Lake H...

HPESBNW04078 rev.2 - Aruba AirWave Glass, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Escalation of Privilege, Execution of Arbitrary Commands, Unauthenticated Arbitrary Code Execution, Unauthorized Access, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Airwave Softwar...

HPESBHF04074 rev.1 - HP/HPE R7000 and R5000 Uninterruptable Power System Network Module Firmware (AF465A), Ripple20 Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE UPS Network Module - Prior to 1.12.002 - The HPE UPS Network Module is an option for HP/HPE...

HPESBHF04070 rev.4 - HPE ProLiant Servers, Apollo Products, Converged Systems, and Storage Products with Integrated Lights-Out 5, Integrated Lights-Out 4, or Integrated Lights-Out 3, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.33 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.77 HPE Integrated Lights-Out 3 iLO 3 - Prior to v1.94 HPE...