← Database

CVE-2022-28640

HIGH CVSS: 8.8 Published: 2022-09-20 Modified: 2026-06-17

Description

A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability was discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses this security vulnerability.

Affected Platforms

Hpe Proliant Dl345 Gen10 Plus ServerHpe Proliant Xl225N Gen10 Plus 1U NodeHpe Proliant Dx170R Gen10 ServerHpe Proliant Bl460C Gen10 Server BladeHpe Proliant Dl325 Gen10 ServerHpe Integrated Lights-Out 5 FirmwareHp Apollo 4500Hpe Proliant Dx385 Gen10 Plus V2 ServerHpe Storeeasy 1860 StorageHpe Proliant Ml30 Gen10 Plus Server

Weakness Type

NVD-CWE-noinfo, CWE-94

References