Lucene search

K

Integrated Lights-Out 5 Firmware Security Vulnerabilities

cve
cve

CVE-2022-28626

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availa...

6.7CVSS

6.8AI Score

0.0004EPSS

2022-08-12 03:15 PM
34
4
cve
cve

CVE-2022-28627

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availabili...

8.4CVSS

8.4AI Score

0.001EPSS

2022-08-12 03:15 PM
33
4
cve
cve

CVE-2022-28628

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availabili...

8.4CVSS

8.4AI Score

0.001EPSS

2022-08-12 03:15 PM
25
4
cve
cve

CVE-2022-28629

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A low privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availabil...

7.8CVSS

7.7AI Score

0.0004EPSS

2022-08-12 03:15 PM
36
4
cve
cve

CVE-2022-28630

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality and integrity, and a parti...

7.3CVSS

7.3AI Score

0.001EPSS

2022-08-12 03:15 PM
35
4
cve
cve

CVE-2022-28631

A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute ...

8.8CVSS

8.8AI Score

0.001EPSS

2022-08-12 03:15 PM
35
4
cve
cve

CVE-2022-28632

A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute ...

8.8CVSS

8.8AI Score

0.001EPSS

2022-08-12 03:15 PM
48
4
cve
cve

CVE-2022-28633

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file ...

7.3CVSS

6.6AI Score

0.001EPSS

2022-08-12 03:15 PM
41
4
cve
cve

CVE-2022-28634

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availa...

6.7CVSS

6.8AI Score

0.0004EPSS

2022-08-12 03:15 PM
38
cve
cve

CVE-2022-28635

A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arb...

7.4CVSS

7.7AI Score

0.001EPSS

2022-08-12 03:15 PM
35
4
cve
cve

CVE-2022-28636

A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arb...

7.4CVSS

7.7AI Score

0.001EPSS

2022-08-12 03:15 PM
43
4
cve
cve

CVE-2022-28637

A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware fo...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-09-20 09:15 PM
29
2
cve
cve

CVE-2022-28638

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise h...

7.8CVSS

7.7AI Score

0.0004EPSS

2022-09-20 09:15 PM
171
cve
cve

CVE-2022-28639

A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise...

8.8CVSS

8.9AI Score

0.001EPSS

2022-09-20 09:15 PM
174
cve
cve

CVE-2022-28640

A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability was discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated...

8.8CVSS

8.7AI Score

0.001EPSS

2022-09-20 09:15 PM
28
2
cve
cve

CVE-2023-30911

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.

7.5CVSS

7.5AI Score

0.001EPSS

2023-10-18 06:15 PM
20
cve
cve

CVE-2023-50272

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulnerability could be remotely exploited to allow authentication bypass.

9.8CVSS

9.4AI Score

0.001EPSS

2023-12-19 04:15 PM
40