CVE-2018-7105
A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.
Published:Sep 27, 2018
Last Modified:Nov 21, 2024
EPS:Sep 27, 2018
EPSS Score:0.01592
CVSS Score:7.2
Affected Products
Vendor
Product
Action
Vendor
Hp
Product
Gen 10 Servers
Hp
Gen 10 Servers
Vendor
Hp
Product
Integrated Lights-out
Hp
Integrated Lights-out
Vendor
Hp
Product
Integrated Lights-out 3 Firmware
Hp
Integrated Lights-out 3 Firmware
Vendor
Hp
Product
Integrated Lights-out 4 Firmware
Hp
Integrated Lights-out 4 Firmware
Vendor
Hp
Product
Integrated Lights-out 5 Firmware
Hp
Integrated Lights-out 5 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
