CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A low privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Vendor | Product | Version | CPE |
---|---|---|---|
hpe | integrated_lights-out_5_firmware | * | cpe:2.3:o:hpe:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:* |
hpe | apollo_2000_gen10_plus_system | - | cpe:2.3:h:hpe:apollo_2000_gen10_plus_system:-:*:*:*:*:*:*:* |
hpe | apollo_4200_gen10_server | - | cpe:2.3:h:hpe:apollo_4200_gen10_server:-:*:*:*:*:*:*:* |
hpe | apollo_4510_gen10_system | - | cpe:2.3:h:hpe:apollo_4510_gen10_system:-:*:*:*:*:*:*:* |
hpe | apollo_6500_gen10_plus_system | - | cpe:2.3:h:hpe:apollo_6500_gen10_plus_system:-:*:*:*:*:*:*:* |
hpe | apollo_6500_gen10_system | - | cpe:2.3:h:hpe:apollo_6500_gen10_system:-:*:*:*:*:*:*:* |
hpe | apollo_n2600_gen10_plus | - | cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-:*:*:*:*:*:*:* |
hpe | apollo_n2800_gen10_plus | - | cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-:*:*:*:*:*:*:* |
hpe | apollo_r2600_gen10 | - | cpe:2.3:h:hpe:apollo_r2600_gen10:-:*:*:*:*:*:*:* |
hpe | apollo_r2800_gen10 | - | cpe:2.3:h:hpe:apollo_r2800_gen10:-:*:*:*:*:*:*:* |