CVE-2023-30911: High severity hp integrated lights-out 5 vulnerability

Q: What is the severity of CVE-2023-30911?

CVE-2023-30911 has a severity rating that indicates a potential denial of service risk affecting HPE Integrated Lights-Out firmware.

Q: How do I fix CVE-2023-30911?

To fix CVE-2023-30911, update the HPE Integrated Lights-Out 5 firmware to version 2.98 or later and the Integrated Lights-Out 6 firmware to version 1.53 or later.

Q: What does CVE-2023-30911 impact?

CVE-2023-30911 specifically impacts HPE Integrated Lights-Out 5 and Integrated Lights-Out 6 systems using iLOrest.

Q: What are the consequences of CVE-2023-30911?

The consequences of CVE-2023-30911 include the potential for denial of service, which may disrupt normal operations of the affected systems.

Q: When was CVE-2023-30911 disclosed?

CVE-2023-30911 was disclosed as part of HPE's ongoing efforts to improve cybersecurity in their products.

Published Oct 18, 2023

Updated

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.

Affected Software

77 affected components

HPE Integrated Lights-out 5 Firmware<2.98

HPE Apollo 2000 System

HPE Apollo 4200 Gen10 Plus System

HPE Apollo 4200 Gen10 Server

HPE Apollo 4510 Gen10 System

HPE Apollo 6500 Gen10 Plus System

HPE Apollo 6500 Gen10 System

HPE Apollo N2600 Gen10 Plus

HPE Apollo N2800 Gen10 Plus

HPE Apollo R2200 Gen10

HPE Apollo R2600 Gen10

HPE Apollo R2800 Gen10

HPE Edgeline E920 Server Blade

HPE Edgeline E920d Server Blade

HPE Edgeline E920t Server Blade

HPE Proliant Bl460c Gen10 Server Blade

HPE Proliant Dl110 Gen10 Plus Telco Server

HPE Proliant Dl160 Gen10 Server

HPE Proliant Dl180 Gen10 Server

HPE Proliant Dl20 Gen10 Plus Server

HPE Proliant Dl20 Gen10 Server

HPE Proliant Dl325 Gen10 Plus Server

HPE Proliant Dl325 Gen10 Plus V2 Server

HPE Proliant Dl345 Gen10 Plus Server

HPE Proliant Dl360 Gen10 Plus Server

HPE Proliant Dl360 Gen10 Server

HPE Proliant Dl365 Gen10 Plus Server

HPE Proliant Dl380 Gen10 Plus Server

HPE Proliant Dl380 Gen10 Server

HPE Proliant Dl385 Gen10 Plus Server

HPE Proliant Dl385 Gen10 Plus V2 Server

HPE Proliant Dl385 Gen10 Server

HPE Proliant Dl560 Gen10 Server

HPE Proliant Dl580 Gen10 Server

HPE Proliant E910 Server Blade

HPE Proliant E910t Server Blade

HPE Proliant M750 Server Blade

HPE ProLiant MicroServer Gen10 Plus

HPE Proliant Microserver Gen10 Plus V2

HPE Proliant Ml110 Gen10 Server

HPE Proliant Ml30 Gen10 Plus Server

HPE Proliant Ml30 Gen10 Server

HPE Proliant Ml350 Gen10 Server

HPE Proliant Xl170r Gen10 Server

HPE Proliant Xl190r Gen10 Server

HPE Proliant Xl220n Gen10 Plus Server

HPE Proliant Xl225n Gen10 Plus 1u Node

HPE Proliant Xl230k Gen10 Server

HPE Proliant Xl270d Gen10 Server

HPE Proliant Xl290n Gen10 Plus Server

HPE Proliant Xl2x260w Gen10 Server

HPE Proliant Xl645d Gen10 Plus Server

HPE Proliant Xl675d Gen10 Plus Server

HPE Proliant Xl925g Gen10 Plus 1u 4-node Configure-to-order Server

HPE Synergy 480 Gen10 Compute Module

HPE Synergy 480 Gen10 Plus Compute Module

HPE Synergy 660 Gen10 Compute Module

HPE Integrated Lights-out 6 Firmware<1.53

HPE Alletra 4110

HPE Alletra 4120

HPE Alletra 4140

HPE Proliant Dl110 Gen11

HPE Proliant Dl20 Gen11

HPE Proliant Dl320 Gen11 Server

HPE Proliant Dl325 Gen11 Server

HPE Proliant Dl345 Gen11 Server

HPE Proliant Dl360 Gen11 Server

HPE Proliant Dl365 Gen11 Server

HPE Proliant Dl380 Gen11 Server

HPE Proliant Dl380a Gen11

HPE Proliant Dl385 Gen11 Server

HPE Proliant Dl560 Gen11

HPE Proliant Ml110 Gen11

HPE Proliant Ml30 Gen11

HPE Proliant Ml350 Gen11 Server

HPE Proliant Rl300 Gen11

HPE Synergy 480 Gen11 Compute Module

Event History

Oct 18, 2023

CVE Published

via MITRE·05:04 PM

Data Sourced

via MITRE·05:04 PM

DescriptionSeverity

Data Sourced

06:15 PM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2023-30911?

CVE-2023-30911 has a severity rating that indicates a potential denial of service risk affecting HPE Integrated Lights-Out firmware.

How do I fix CVE-2023-30911?

To fix CVE-2023-30911, update the HPE Integrated Lights-Out 5 firmware to version 2.98 or later and the Integrated Lights-Out 6 firmware to version 1.53 or later.

What does CVE-2023-30911 impact?