A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file system resulting in a complete loss of confidentiality and a partial loss of integrity and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2022-08-12 15:15
Updated : 2024-02-28 19:29
NVD link : CVE-2022-28633
Mitre link : CVE-2022-28633
CVE.ORG link : CVE-2022-28633
JSON object : View
Products Affected
hpe
- proliant_microserver_gen10_plus
- proliant_dl325_gen10_plus_server
- apollo_n2600_gen10_plus
- proliant_dx360_gen10_server
- proliant_dl180_gen10_server
- proliant_ml110_gen10_server
- proliant_dl345_gen10_plus_server
- proliant_dx385_gen10_plus_server
- proliant_xl420_gen10_server
- edgeline_e920t_server_blade
- proliant_dl360_gen10_server
- proliant_dx560_gen10_server
- storeeasy_1660_performance_storage
- proliant_xl925g_gen10_plus_server
- storeeasy_1860_performance_storage
- proliant_dx380_gen10_plus_server
- proliant_ml30_gen10_plus_server
- storeeasy_1660_expanded_storage
- proliant_dx170r_gen10_server
- integrated_lights-out_5_firmware
- proliant_bl460c_gen10_server_blade
- apollo_r2600_gen10
- edgeline_e920_server_blade
- proliant_dl20_gen10_plus_server
- proliant_xl220n_gen10_plus_server
- proliant_dl385_gen10_plus_v2_server
- proliant_xl450_gen10_server
- proliant_dl160_gen10_server
- proliant_dx220n_gen10_plus_server
- storeeasy_1460_storage
- proliant_dx325_gen10_plus_v2_server
- proliant_dx380_gen10_server
- apollo_n2800_gen10_plus
- proliant_dl385_gen10_plus_server
- proliant_xl225n_gen10_plus_1u_node
- apollo_r2800_gen10
- storeeasy_1560_storage
- storage_file_controller
- apollo_6500_gen10_system
- storeeasy_1860_storage
- apollo_2000_gen10_plus_system
- proliant_dl560_gen10_server
- apollo_4510_gen10_system
- proliant_dl110_gen10_plus_telco_server
- proliant_ml30_gen10_server
- proliant_m750_server_blade
- proliant_dl380_gen10_plus_server
- apollo_6500_gen10_plus_system
- storeeasy_1660_storage
- proliant_e910_server_blade
- proliant_e910t_server_blade
- proliant_dl120_gen10_server
- proliant_dl380_gen10_server
- proliant_dl580_gen10_server
- proliant_xl645d_gen10_plus_server
- proliant_xl675d_gen10_plus_server
- proliant_xl190r_gen10_server
- proliant_dl20_gen10_server
- proliant_dx4200_gen10_server
- proliant_dl385_gen10_server
- proliant_dx360_gen10_plus_server
- proliant_xl230k_gen10_server
- proliant_dl325_gen10_plus_v2_server
- edgeline_e920d_server_blade
- proliant_dx190r_gen10_server
- proliant_xl290n_gen10_plus_server
- proliant_dl360_gen10_plus_server
- proliant_dl365_gen10_plus_server
- proliant_ml350_gen10_server
- storage_performance_file_controller
- proliant_dl325_gen10_server
- apollo_4200_gen10_server
- proliant_xl270d_gen10_server
- proliant_dx385_gen10_plus_v2_server
- proliant_xl170r_gen10_server
CWE