← Database

CVE-2022-28633

HIGH CVSS: 7.3 Published: 2022-08-12 Modified: 2026-06-17

Description

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file system resulting in a complete loss of confidentiality and a partial loss of integrity and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).

Affected Platforms

Hpe Apollo R2600 Gen10Hpe Proliant Dl345 Gen10 Plus ServerHpe Proliant E910T Server BladeHpe Proliant Ml110 Gen10 ServerHpe Proliant Xl645D Gen10 Plus ServerHpe Proliant Dx560 Gen10 ServerHpe Proliant E910 Server BladeHpe Storeeasy 1860 Performance StorageHpe Apollo 6500 Gen10 SystemHpe Proliant Xl190R Gen10 Server

Weakness Type

NVD-CWE-noinfo

References