CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-28635

A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. A successful attack depends on conditions beyond the attackers control. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 15.9%

CVSS Severity

CVSS v3 Score 7.4

References

Products affected by CVE-2022-28635

Hpe » Apollo 2000 Gen10 Plus System » Version: N/A

cpe:2.3:h:hpe:apollo_2000_gen10_plus_system:-
Hpe » Apollo 4200 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:apollo_4200_gen10_server:-
Hpe » Apollo 4510 Gen10 System » Version: N/A

cpe:2.3:h:hpe:apollo_4510_gen10_system:-
Hpe » Apollo 6500 Gen10 Plus System » Version: N/A

cpe:2.3:h:hpe:apollo_6500_gen10_plus_system:-
Hpe » Apollo 6500 Gen10 System » Version: N/A

cpe:2.3:h:hpe:apollo_6500_gen10_system:-
Hpe » Apollo N2600 Gen10 Plus » Version: N/A

cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-
Hpe » Apollo N2800 Gen10 Plus » Version: N/A

cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-
Hpe » Apollo R2600 Gen10 » Version: N/A

cpe:2.3:h:hpe:apollo_r2600_gen10:-
Hpe » Apollo R2800 Gen10 » Version: N/A

cpe:2.3:h:hpe:apollo_r2800_gen10:-
Hpe » Edgeline E920 Server Blade » Version: N/A

cpe:2.3:h:hpe:edgeline_e920_server_blade:-
Hpe » Edgeline E920d Server Blade » Version: N/A

cpe:2.3:h:hpe:edgeline_e920d_server_blade:-
Hpe » Edgeline E920t Server Blade » Version: N/A

cpe:2.3:h:hpe:edgeline_e920t_server_blade:-
Hpe » Proliant Bl460c Gen10 Server Blade » Version: N/A

cpe:2.3:h:hpe:proliant_bl460c_gen10_server_blade:-
Hpe » Proliant Dl110 Gen10 Plus Telco Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl110_gen10_plus_telco_server:-
Hpe » Proliant Dl120 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl120_gen10_server:-
Hpe » Proliant Dl160 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl160_gen10_server:-
Hpe » Proliant Dl180 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl180_gen10_server:-
Hpe » Proliant Dl20 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl20_gen10_plus_server:-
Hpe » Proliant Dl20 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl20_gen10_server:-
Hpe » Proliant Dl325 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl325_gen10_plus_server:-
Hpe » Proliant Dl325 Gen10 Plus V2 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl325_gen10_plus_v2_server:-
Hpe » Proliant Dl325 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl325_gen10_server:-
Hpe » Proliant Dl345 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl345_gen10_plus_server:-
Hpe » Proliant Dl360 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl360_gen10_plus_server:-
Hpe » Proliant Dl360 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl360_gen10_server:-
Hpe » Proliant Dl365 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl365_gen10_plus_server:-
Hpe » Proliant Dl380 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl380_gen10_plus_server:-
Hpe » Proliant Dl380 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl380_gen10_server:-
Hpe » Proliant Dl385 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl385_gen10_plus_server:-
Hpe » Proliant Dl385 Gen10 Plus V2 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl385_gen10_plus_v2_server:-
Hpe » Proliant Dl385 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl385_gen10_server:-
Hpe » Proliant Dl560 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl560_gen10_server:-
Hpe » Proliant Dl580 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dl580_gen10_server:-
Hpe » Proliant Dx170r Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx170r_gen10_server:-
Hpe » Proliant Dx190r Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx190r_gen10_server:-
Hpe » Proliant Dx220n Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx220n_gen10_plus_server:-
Hpe » Proliant Dx325 Gen10 Plus V2 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx325_gen10_plus_v2_server:-
Hpe » Proliant Dx360 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx360_gen10_plus_server:-
Hpe » Proliant Dx360 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx360_gen10_server:-
Hpe » Proliant Dx380 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx380_gen10_plus_server:-
Hpe » Proliant Dx380 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx380_gen10_server:-
Hpe » Proliant Dx385 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx385_gen10_plus_server:-
Hpe » Proliant Dx385 Gen10 Plus V2 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx385_gen10_plus_v2_server:-
Hpe » Proliant Dx4200 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx4200_gen10_server:-
Hpe » Proliant Dx560 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_dx560_gen10_server:-
Hpe » Proliant E910 Server Blade » Version: N/A

cpe:2.3:h:hpe:proliant_e910_server_blade:-
Hpe » Proliant E910t Server Blade » Version: N/A

cpe:2.3:h:hpe:proliant_e910t_server_blade:-
Hpe » Proliant M750 Server Blade » Version: N/A

cpe:2.3:h:hpe:proliant_m750_server_blade:-
Hpe » Proliant Microserver Gen10 Plus » Version: N/A

cpe:2.3:h:hpe:proliant_microserver_gen10_plus:-
Hpe » Proliant Ml110 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_ml110_gen10_server:-
Hpe » Proliant Ml30 Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_ml30_gen10_plus_server:-
Hpe » Proliant Ml30 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_ml30_gen10_server:-
Hpe » Proliant Ml350 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_ml350_gen10_server:-
Hpe » Proliant Xl170r Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl170r_gen10_server:-
Hpe » Proliant Xl190r Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl190r_gen10_server:-
Hpe » Proliant Xl220n Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl220n_gen10_plus_server:-
Hpe » Proliant Xl225n Gen10 Plus 1u Node » Version: N/A

cpe:2.3:h:hpe:proliant_xl225n_gen10_plus_1u_node:-
Hpe » Proliant Xl230k Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl230k_gen10_server:-
Hpe » Proliant Xl270d Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl270d_gen10_server:-
Hpe » Proliant Xl290n Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl290n_gen10_plus_server:-
Hpe » Proliant Xl420 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl420_gen10_server:-
Hpe » Proliant Xl450 Gen10 Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl450_gen10_server:-
Hpe » Proliant Xl645d Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl645d_gen10_plus_server:-
Hpe » Proliant Xl675d Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl675d_gen10_plus_server:-
Hpe » Proliant Xl925g Gen10 Plus Server » Version: N/A

cpe:2.3:h:hpe:proliant_xl925g_gen10_plus_server:-
Hpe » Storage File Controller » Version: N/A

cpe:2.3:h:hpe:storage_file_controller:-
Hpe » Storage Performance File Controller » Version: N/A

cpe:2.3:h:hpe:storage_performance_file_controller:-
Hpe » Storeeasy 1460 Storage » Version: N/A

cpe:2.3:h:hpe:storeeasy_1460_storage:-
Hpe » Storeeasy 1560 Storage » Version: N/A

cpe:2.3:h:hpe:storeeasy_1560_storage:-
Hpe » Storeeasy 1660 Expanded Storage » Version: N/A

cpe:2.3:h:hpe:storeeasy_1660_expanded_storage:-
Hpe » Storeeasy 1660 Performance Storage » Version: N/A

cpe:2.3:h:hpe:storeeasy_1660_performance_storage:-
Hpe » Storeeasy 1660 Storage » Version: N/A

cpe:2.3:h:hpe:storeeasy_1660_storage:-
Hpe » Storeeasy 1860 Performance Storage » Version: N/A

cpe:2.3:h:hpe:storeeasy_1860_performance_storage:-
Hpe » Storeeasy 1860 Storage » Version: N/A

cpe:2.3:h:hpe:storeeasy_1860_storage:-
Hpe » Integrated Lights-Out 5 Firmware » Version: N/A

cpe:2.3:o:hpe:integrated_lights-out_5_firmware:-
Hpe » Integrated Lights-Out 5 Firmware » Version: 2.63

cpe:2.3:o:hpe:integrated_lights-out_5_firmware:2.63

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-28635

Products

Pricing

Contact Us