CVE-2016-5445: High severity oracle integrated lights out manager vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

3 affected components

ORACLE Integrated Lights Out Manager Firmware=3.0

ORACLE Integrated Lights Out Manager Firmware=3.1

ORACLE Integrated Lights Out Manager Firmware=3.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5445?

CVE-2016-5445 has not been explicitly assigned a severity rating, but it poses risks to confidentiality, integrity, and availability.

How do I fix CVE-2016-5445?

Fixing CVE-2016-5445 involves updating to a secure version of the Integrated Lights Out Manager firmware provided by Oracle.

Which products are affected by CVE-2016-5445?

CVE-2016-5445 affects Oracle Integrated Lights Out Manager firmware versions 3.0, 3.1, and 3.2.

Can CVE-2016-5445 be exploited remotely?

Yes, CVE-2016-5445 can be exploited remotely by attackers, potentially impacting system confidentiality and availability.

How can I determine if I am impacted by CVE-2016-5445?

To determine if you are impacted by CVE-2016-5445, check if your systems are running Integrated Lights Out Manager firmware versions 3.0, 3.1, or 3.2.