CVE-2016-5446: High severity oracle integrated lights out manager vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Infrastructure.

Affected Software

3 affected components

ORACLE Integrated Lights Out Manager Firmware=3.0

ORACLE Integrated Lights Out Manager Firmware=3.1

ORACLE Integrated Lights Out Manager Firmware=3.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5446?

CVE-2016-5446 is classified as a critical vulnerability affecting confidentiality, integrity, and availability.

How do I fix CVE-2016-5446?

To mitigate CVE-2016-5446, it is recommended to update the Integrated Lights Out Manager firmware to the latest version provided by Oracle.

What systems are affected by CVE-2016-5446?

CVE-2016-5446 affects Oracle Integrated Lights Out Manager firmware versions 3.0, 3.1, and 3.2.

Can CVE-2016-5446 be exploited remotely?

Yes, CVE-2016-5446 allows remote attackers to exploit the vulnerability.

What are the potential impacts of CVE-2016-5446?

The impacts of CVE-2016-5446 include risks to the confidentiality, integrity, and availability of the affected systems.