CVE-2018-7101

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-7101
A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://www.securitytracker.com/id/1041488 Third Party Advisory VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03875en_us Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hp:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hp:proliant_bl460c_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl120_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl160_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl180_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl360_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl380_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl385_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl560_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl580_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml110_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml350_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl170r_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl190r_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl230k_gen10_server:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2018-09-27 18:29

Updated : 2023-12-10 12:44

NVD link : CVE-2018-7101

Mitre link : CVE-2018-7101

CVE.ORG link : CVE-2018-7101

JSON object : View

Products Affected

hp

  • proliant_dl160_gen10_server
  • proliant_xl170r_gen10_server
  • proliant_dl580_gen10_server
  • integrated_lights-out
  • proliant_dl120_gen10_server
  • proliant_ml350_gen10_server
  • proliant_dl180_gen10_server
  • proliant_ml110_gen10_server
  • proliant_xl190r_gen10_server
  • proliant_bl460c_gen10_server
  • proliant_dl380_gen10_server
  • integrated_lights-out_4_firmware
  • proliant_dl560_gen10_server
  • proliant_xl230k_gen10_server
  • proliant_dl360_gen10_server
  • proliant_dl385_gen10_server
  • integrated_lights-out_5_firmware
CWE
NVD-CWE-noinfo