A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability was discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses this security vulnerability.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 Sep 2022, 19:06
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:hpe:proliant_dx360_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_4200_gen10_plus_system:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl160_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx385_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx380_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx325_gen10_plus_v2_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl385_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_m750_server_blade:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_ml110_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl380_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl170r_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx360_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl110_gen10_plus_telco_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:edgeline_e920t_server_blade:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl365_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storeeasy_1560_storage:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_ml30_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl20_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storeeasy_1660_expanded_storage:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl450_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx380_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storeeasy_1660_performance_storage:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl420_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hp:apollo_4500:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx170r_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx220n_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:edgeline_e920_server_blade:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl225n_gen10_plus_1u_node:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storeeasy_1660_storage:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl325_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl270d_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl675d_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storage_file_controller:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx190r_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx385_gen10_plus_v2_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_r2800_gen10:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl230k_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl345_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storage_performance_file_controller:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl580_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_4510_gen10_system:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl325_gen10_plus_v2_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl385_gen10_plus_v2_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:edgeline_e920d_server_blade:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl380_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storeeasy_1860_performance_storage:-:*:*:*:*:*:*:* cpe:2.3:o:hpe:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl220n_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl360_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hp:apollo_r2000_chassis:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_6500_gen10_plus:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx4200_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl360_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:integrated_lights-out_5:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl20_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl190r_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storeeasy_1860_storage:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_ml350_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_bl460c_gen10_server_blade:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl325_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_e910t_server_blade:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_r2600_gen10:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl290n_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl925g_gen10_plus_1u_4-node_configure-to-order_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl180_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dx560_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_xl645d_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:storeeasy_1460_storage:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_microserver_gen10_plus:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:apollo_2000_gen10_plus_system:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl385_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_dl560_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_ml30_gen10_plus_server:-:*:*:*:*:*:*:* cpe:2.3:h:hp:apollo_4200_gen10_server:-:*:*:*:*:*:*:* cpe:2.3:h:hpe:proliant_e910_server_blade:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| First Time |
Hp apollo 4500
Hpe proliant Dl365 Gen10 Plus Server Hpe proliant Ml30 Gen10 Server Hpe integrated Lights-out 5 Hpe proliant Xl220n Gen10 Plus Server Hpe apollo N2600 Gen10 Plus Hpe proliant Dx380 Gen10 Server Hpe proliant Dx385 Gen10 Plus V2 Server Hpe proliant Dl345 Gen10 Plus Server Hpe edgeline E920 Server Blade Hpe proliant Xl170r Gen10 Server Hpe proliant Xl450 Gen10 Server Hpe proliant Dl380 Gen10 Server Hpe storeeasy 1660 Expanded Storage Hpe apollo 2000 Gen10 Plus System Hpe proliant Ml30 Gen10 Plus Server Hpe proliant Dl20 Gen10 Plus Server Hpe proliant Xl225n Gen10 Plus 1u Node Hpe proliant Ml110 Gen10 Server Hpe proliant Xl675d Gen10 Plus Server Hpe proliant Dx4200 Gen10 Server Hpe apollo 4200 Gen10 Plus System Hpe storeeasy 1460 Storage Hp Hpe proliant Dl360 Gen10 Server Hpe proliant Dl110 Gen10 Plus Telco Server Hpe apollo R2600 Gen10 Hpe Hpe proliant Dx360 Gen10 Server Hpe proliant Xl290n Gen10 Plus Server Hpe proliant Xl230k Gen10 Server Hp apollo R2000 Chassis Hpe proliant Microserver Gen10 Plus Hpe proliant Dl180 Gen10 Server Hpe proliant Xl190r Gen10 Server Hpe proliant Dx190r Gen10 Server Hpe proliant Dx560 Gen10 Server Hpe proliant Xl270d Gen10 Server Hpe proliant Dl160 Gen10 Server Hpe proliant Dl360 Gen10 Plus Server Hpe proliant Dl380 Gen10 Plus Server Hpe proliant Dl20 Gen10 Server Hpe apollo 6500 Gen10 Plus Hpe proliant Dl385 Gen10 Plus Server Hpe proliant Dl560 Gen10 Server Hpe storeeasy 1860 Storage Hpe proliant Dx360 Gen10 Plus Server Hpe proliant Dl385 Gen10 Server Hp apollo 4200 Gen10 Server Hpe proliant Dl325 Gen10 Plus V2 Server Hpe edgeline E920t Server Blade Hpe proliant Xl925g Gen10 Plus 1u 4-node Configure-to-order Server Hpe proliant Dx170r Gen10 Server Hpe edgeline E920d Server Blade Hpe proliant Dx385 Gen10 Plus Server Hpe proliant Dl580 Gen10 Server Hpe proliant E910t Server Blade Hpe storeeasy 1660 Storage Hpe proliant Dl385 Gen10 Plus V2 Server Hpe proliant Dl325 Gen10 Plus Server Hpe integrated Lights-out 5 Firmware Hpe proliant Dx325 Gen10 Plus V2 Server Hpe storage Performance File Controller Hpe proliant E910 Server Blade Hpe apollo 4510 Gen10 System Hpe proliant Ml350 Gen10 Server Hpe proliant Bl460c Gen10 Server Blade Hpe proliant Xl645d Gen10 Plus Server Hpe proliant Dx380 Gen10 Plus Server Hpe proliant Xl420 Gen10 Server Hpe storeeasy 1860 Performance Storage Hpe storeeasy 1560 Storage Hpe storeeasy 1660 Performance Storage Hpe apollo R2800 Gen10 Hpe proliant Dx220n Gen10 Plus Server Hpe storage File Controller Hpe proliant Dl325 Gen10 Server Hpe apollo N2800 Gen10 Plus Hpe proliant M750 Server Blade |
|
| References | (MISC) https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
20 Sep 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-20 21:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-28640
Mitre link : CVE-2022-28640
CVE.ORG link : CVE-2022-28640
JSON object : View
Products Affected
hpe
- proliant_dl325_gen10_plus_server
- proliant_dx220n_gen10_plus_server
- proliant_dl345_gen10_plus_server
- integrated_lights-out_5
- proliant_dl380_gen10_plus_server
- proliant_bl460c_gen10_server_blade
- apollo_n2600_gen10_plus
- proliant_microserver_gen10_plus
- proliant_ml30_gen10_plus_server
- proliant_dl160_gen10_server
- edgeline_e920d_server_blade
- apollo_4200_gen10_plus_system
- apollo_6500_gen10_plus
- proliant_dx560_gen10_server
- proliant_e910_server_blade
- storage_file_controller
- proliant_xl170r_gen10_server
- proliant_dx380_gen10_server
- apollo_2000_gen10_plus_system
- proliant_dx325_gen10_plus_v2_server
- proliant_dx360_gen10_plus_server
- edgeline_e920_server_blade
- edgeline_e920t_server_blade
- proliant_dx360_gen10_server
- proliant_dl560_gen10_server
- proliant_xl270d_gen10_server
- proliant_xl230k_gen10_server
- proliant_dx170r_gen10_server
- proliant_dl365_gen10_plus_server
- proliant_ml350_gen10_server
- proliant_ml110_gen10_server
- proliant_dl360_gen10_server
- proliant_e910t_server_blade
- proliant_xl925g_gen10_plus_1u_4-node_configure-to-order_server
- integrated_lights-out_5_firmware
- storeeasy_1460_storage
- proliant_dl110_gen10_plus_telco_server
- proliant_xl220n_gen10_plus_server
- proliant_xl420_gen10_server
- proliant_dx4200_gen10_server
- storeeasy_1660_performance_storage
- storeeasy_1860_performance_storage
- proliant_xl450_gen10_server
- apollo_r2600_gen10
- apollo_4510_gen10_system
- proliant_dl325_gen10_plus_v2_server
- proliant_xl225n_gen10_plus_1u_node
- proliant_dl380_gen10_server
- proliant_dl385_gen10_plus_server
- proliant_dl325_gen10_server
- proliant_m750_server_blade
- proliant_xl290n_gen10_plus_server
- storage_performance_file_controller
- proliant_dx385_gen10_plus_server
- proliant_dl580_gen10_server
- proliant_xl190r_gen10_server
- proliant_dl385_gen10_plus_v2_server
- apollo_n2800_gen10_plus
- proliant_dl360_gen10_plus_server
- proliant_dx385_gen10_plus_v2_server
- proliant_dl20_gen10_plus_server
- proliant_dl180_gen10_server
- proliant_xl675d_gen10_plus_server
- proliant_xl645d_gen10_plus_server
- proliant_dl385_gen10_server
- proliant_dl20_gen10_server
- storeeasy_1560_storage
- proliant_ml30_gen10_server
- proliant_dx190r_gen10_server
- storeeasy_1860_storage
- storeeasy_1660_storage
- proliant_dx380_gen10_plus_server
- storeeasy_1660_expanded_storage
- apollo_r2800_gen10
hp
- apollo_4500
- apollo_4200_gen10_server
- apollo_r2000_chassis
CWE