CVE-2022-28636

First published: Thu Aug 11 2022(Updated: )

A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. A successful attack depends on conditions beyond the attackers control. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).

Credit: security-alert@hpe.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/author
• agent/severity
• agent/last-modified-date
• agent/references
• agent/first-publish-date
• agent/event
• agent/tags
• agent/description
• agent/softwarecombine
• vendor/hpe
• canonical/hpe integrated lights-out 5 firmware
• canonical/hpe apollo 2000 gen10 plus system
• canonical/hpe apollo 4200 gen10 server
• canonical/hpe apollo 4510 gen10 system
• canonical/hpe apollo 6500 gen10 plus system
• canonical/hpe apollo 6500 gen10 system
• canonical/hpe apollo n2600 gen10 plus
• canonical/hpe apollo n2800 gen10 plus
• canonical/hpe apollo r2600 gen10
• canonical/hpe apollo r2800 gen10
• canonical/hpe edgeline e920 server blade
• canonical/hpe edgeline e920d server blade
• canonical/hpe edgeline e920t server blade
• canonical/hpe proliant bl460c gen10 server blade
• canonical/hpe proliant dl110 gen10 plus telco server
• canonical/hpe proliant dl120 gen10 server
• canonical/hpe proliant dl160 gen10 server
• canonical/hpe proliant dl180 gen10 server
• canonical/hpe proliant dl20 gen10 plus server
• canonical/hpe proliant dl20 gen10 server
• canonical/hpe proliant dl325 gen10 plus server
• canonical/hpe proliant dl325 gen10 plus v2 server
• canonical/hpe proliant dl325 gen10 server
• canonical/hpe proliant dl345 gen10 plus server
• canonical/hpe proliant dl360 gen10 plus server
• canonical/hpe proliant dl360 gen10 server
• canonical/hpe proliant dl365 gen10 plus server
• canonical/hpe proliant dl380 gen10 plus server
• canonical/hpe proliant dl380 gen10 server
• canonical/hpe proliant dl385 gen10 plus server
• canonical/hpe proliant dl385 gen10 plus v2 server
• canonical/hpe proliant dl385 gen10 server
• canonical/hpe proliant dl560 gen10 server
• canonical/hpe proliant dl580 gen10 server
• canonical/hpe proliant dx170r gen10 server
• canonical/hpe proliant dx190r gen10 server
• canonical/hpe proliant dx220n gen10 plus server
• canonical/hpe proliant dx325 gen10 plus v2 server
• canonical/hpe proliant dx360 gen10 plus server
• canonical/hpe proliant dx360 gen10 server
• canonical/hpe proliant dx380 gen10 plus server
• canonical/hpe proliant dx380 gen10 server
• canonical/hpe proliant dx385 gen10 plus server
• canonical/hpe proliant dx385 gen10 plus v2 server
• canonical/hpe proliant dx4200 gen10 server
• canonical/hpe proliant dx560 gen10 server
• canonical/hpe proliant e910 server blade
• canonical/hpe proliant e910t server blade
• canonical/hpe proliant m750 server blade
• canonical/hpe proliant microserver gen10 plus
• canonical/hpe proliant ml110 gen10 server
• canonical/hpe proliant ml30 gen10 plus server
• canonical/hpe proliant ml30 gen10 server
• canonical/hpe proliant ml350 gen10 server
• canonical/hpe proliant xl170r gen10 server
• canonical/hpe proliant xl190r gen10 server
• canonical/hpe proliant xl220n gen10 plus server
• canonical/hpe proliant xl225n gen10 plus 1u node
• canonical/hpe proliant xl230k gen10 server
• canonical/hpe proliant xl270d gen10 server
• canonical/hpe proliant xl290n gen10 plus server
• canonical/hpe proliant xl420 gen10 server
• canonical/hpe proliant xl450 gen10 server
• canonical/hpe proliant xl645d gen10 plus server
• canonical/hpe proliant xl675d gen10 plus server
• canonical/hpe proliant xl925g gen10 plus server
• canonical/hpe storage file controller
• canonical/hpe storage performance file controller
• canonical/hpe storeeasy 1460 storage
• canonical/hpe storeeasy 1560 storage
• canonical/hpe storeeasy 1660 expanded storage
• canonical/hpe storeeasy 1660 performance storage
• canonical/hpe storeeasy 1660 storage
• canonical/hpe storeeasy 1860 performance storage
• canonical/hpe storeeasy 1860 storage