CVE-2023-28092: Medium severity hp integrated lights-out firmware vulnerability

Published May 1, 2023

Updated

A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis.

Affected Software

4 affected components

HP Integrated Lights-out Firmware=1.05

HP Integrated Lights-Out=6

HP Proliant Rl300 Firmware=1.12

HP ProLiant RL300=gen_11

Event History

May 1, 2023

CVE Published

via MITRE·02:10 PM

Data Sourced

via MITRE·02:10 PM

DescriptionSeverity

Data Sourced

03:15 PM

Description

Frequently Asked Questions

What is the vulnerability ID of this security vulnerability?

The vulnerability ID is CVE-2023-28092.

What is the severity level of CVE-2023-28092?

The severity level of CVE-2023-28092 is medium, with a severity value of 6.8.

Which HPE ProLiant RL300 Gen11 Server is affected by CVE-2023-28092?

The security vulnerability affects the HPE ProLiant RL300 Gen11 Server.

What is the affected software in this security vulnerability?

The affected software in this vulnerability are Hp Integrated Lights-out Firmware version 1.05 and Hp Proliant Rl300 Firmware version 1.12.

Is Hp Integrated Lights-out version 6 vulnerable to CVE-2023-28092?

No, Hp Integrated Lights-out version 6 is not vulnerable to CVE-2023-28092.

How can an attacker exploit CVE-2023-28092?

The exploit requires physical access inside the server chassis.

Is there any further information available about CVE-2023-28092?

Yes, you can find more information about CVE-2023-28092 at the following link: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04472en_us