CVE-2017-10260: High severity oracle integrated lights out manager vulnerability
Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10260?
CVE-2017-10260 has been classified as a high severity vulnerability.
How do I fix CVE-2017-10260?
To fix CVE-2017-10260, update Oracle Integrated Lights Out Manager firmware to version 3.2.6 or later.
Who is affected by CVE-2017-10260?
CVE-2017-10260 affects users of Oracle Integrated Lights Out Manager firmware versions prior to 3.2.6.
Can CVE-2017-10260 be exploited remotely?
Yes, CVE-2017-10260 can be easily exploited by an unauthenticated attacker with network access via HTTP.
What component of Oracle systems does CVE-2017-10260 affect?
CVE-2017-10260 affects the System Management component of the Oracle Integrated Lights Out Manager.