← Database

CVE-2022-28630

HIGH CVSS: 7.3 Published: 2022-08-12 Modified: 2026-06-17

Description

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality and integrity, and a partial loss of availability. User interaction is required to exploit this vulnerability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).

Affected Platforms

Hpe Apollo R2600 Gen10Hpe Proliant Dl345 Gen10 Plus ServerHpe Proliant E910T Server BladeHpe Proliant Ml110 Gen10 ServerHpe Proliant Xl645D Gen10 Plus ServerHpe Proliant Dx560 Gen10 ServerHpe Proliant E910 Server BladeHpe Storeeasy 1860 Performance StorageHpe Apollo 6500 Gen10 SystemHpe Proliant Xl190R Gen10 Server

Weakness Type

NVD-CWE-noinfo

References