漏洞标题
N/A
漏洞描述信息
在 HPE 集成灯光-out 5(iLO 5) 软件版本2.71之前，发现了一种可能在隔离进程内执行任意代码和拒绝服务(DoS)漏洞：在隔离进程内，一个无特权用户可以利用此漏洞在相邻网络中，以可能执行任意代码，导致该进程内的保密性、完整性和可用性完全丧失。此外，一个无特权用户也可以在隔离进程内利用拒绝服务(DoS)漏洞，导致该进程内的可用性完全丧失。为了解决这个问题，HPE 提供了在 HPE 集成灯光-out 5(iLO 5) 中解决此漏洞的固件升级。
CVSS信息
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Hewlett Packard Enterprise Integrated Lights-Out 5 安全漏洞
漏洞描述信息
Hewlett Packard Enterprise Integrated Lights-Out 5（iLO 5）是美国慧与（Hewlett Packard Enterprise）的一套远程控制解决方案。该方案能够对服务器等IT资产进行远程监控和运维。 Hewlett Packard Enterprise Integrated Lights-Out 5 (iLO 5) firmware 2.71之前版本存在安全漏洞。攻击者利用该漏洞执行任意代码，从而导致系统完全丧失机密性、完整性，部分丧失可用性。
CVSS信息
N/A
漏洞类别
其他