CVE-2016-5453: Critical severity oracle integrated lights out manager vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to IPMI.

Affected Software

3 affected components

ORACLE Integrated Lights Out Manager Firmware=3.0

ORACLE Integrated Lights Out Manager Firmware=3.1

ORACLE Integrated Lights Out Manager Firmware=3.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5453?

CVE-2016-5453 has been classified as a high severity vulnerability affecting the confidentiality, integrity, and availability of affected systems.

How do I fix CVE-2016-5453?

To remediate CVE-2016-5453, users should upgrade the Oracle Integrated Lights Out Manager firmware to a patched version.

What systems are impacted by CVE-2016-5453?

CVE-2016-5453 affects Oracle Integrated Lights Out Manager firmware versions 3.0, 3.1, and 3.2.

Can CVE-2016-5453 be exploited remotely?

Yes, CVE-2016-5453 can be exploited remotely by attackers to compromise system security.

What component is vulnerable in CVE-2016-5453?

CVE-2016-5453 involves an unspecified vulnerability in the ILOM component of Oracle Sun Systems Products.