CVE-2017-10265: High severity oracle integrated lights out manager vulnerability
Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Integrated Lights Out Manager (ILOM) accessible data as well as unauthorized read access to a subset of Oracle Integrated Lights Out Manager (ILOM) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10265?
CVE-2017-10265 is considered to be a high severity vulnerability due to its easily exploitable nature.
How do I fix CVE-2017-10265?
To fix CVE-2017-10265, upgrade the Oracle Integrated Lights Out Manager firmware to version 3.2.6 or later.
What type of attacks can exploit CVE-2017-10265?
CVE-2017-10265 can be exploited by unauthenticated attackers with network access via HTTP.
Which versions of Oracle Integrated Lights Out Manager are affected by CVE-2017-10265?
CVE-2017-10265 affects all versions of Oracle Integrated Lights Out Manager firmware prior to 3.2.6.
Is CVE-2017-10265 easy to exploit?
Yes, CVE-2017-10265 is easy to exploit, making it a significant risk for affected systems.