CVE-2016-3585: High severity oracle integrated lights out manager vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality and integrity via vectors related to Emulex.

Affected Software

3 affected components

ORACLE Integrated Lights Out Manager Firmware=3.0

ORACLE Integrated Lights Out Manager Firmware=3.1

ORACLE Integrated Lights Out Manager Firmware=3.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3585?

CVE-2016-3585 is classified as a high severity vulnerability due to its potential impact on confidentiality and integrity.

How do I fix CVE-2016-3585?

To fix CVE-2016-3585, update your Oracle Integrated Lights Out Manager firmware to the latest version provided by Oracle.

What systems are affected by CVE-2016-3585?

CVE-2016-3585 affects Oracle Integrated Lights Out Manager firmware versions 3.0, 3.1, and 3.2.

Can CVE-2016-3585 be exploited remotely?

Yes, CVE-2016-3585 can be exploited by remote attackers, making it a significant risk for systems using the affected versions.

What consequences can arise from CVE-2016-3585?

Exploitation of CVE-2016-3585 can lead to unauthorized access and modification of system settings, compromising both confidentiality and integrity.