CVE-2017-10265
First published: Thu Oct 19 2017(Updated: )
Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Integrated Lights Out Manager (ILOM) accessible data as well as unauthorized read access to a subset of Oracle Integrated Lights Out Manager (ILOM) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| oracle integrated lights out manager firmware | <=3.2.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10265?
CVE-2017-10265 is considered to be a high severity vulnerability due to its easily exploitable nature.
How do I fix CVE-2017-10265?
To fix CVE-2017-10265, upgrade the Oracle Integrated Lights Out Manager firmware to version 3.2.6 or later.
What type of attacks can exploit CVE-2017-10265?
CVE-2017-10265 can be exploited by unauthenticated attackers with network access via HTTP.
Which versions of Oracle Integrated Lights Out Manager are affected by CVE-2017-10265?
CVE-2017-10265 affects all versions of Oracle Integrated Lights Out Manager firmware prior to 3.2.6.
Is CVE-2017-10265 easy to exploit?
Yes, CVE-2017-10265 is easy to exploit, making it a significant risk for affected systems.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle integrated lights out manager firmware
- version/oracle integrated lights out manager firmware/3.2.5