CVE-2016-5448: Medium severity oracle integrated lights out manager vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP.

Affected Software

3 affected components

ORACLE Integrated Lights Out Manager Firmware=3.0

ORACLE Integrated Lights Out Manager Firmware=3.1

ORACLE Integrated Lights Out Manager Firmware=3.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5448?

CVE-2016-5448 is classified with a medium severity level due to its potential impact on integrity and availability.

How do I fix CVE-2016-5448?

To fix CVE-2016-5448, upgrade the ILOM firmware to version 3.2 or later, or apply any relevant patches provided by Oracle.

What systems are affected by CVE-2016-5448?

CVE-2016-5448 affects Oracle Integrated Lights Out Manager firmware versions 3.0, 3.1, and 3.2.

What types of attacks can be executed through CVE-2016-5448?

CVE-2016-5448 allows remote attackers to potentially disrupt the integrity and availability of systems via SNMP vectors.

Is there a workaround for CVE-2016-5448?

As a workaround for CVE-2016-5448, disabling SNMP on affected systems may reduce the risk of exploitation until a firmware upgrade can be applied.