CVE Feed

    Dashboard / CVE / CVE-2018-7112

    CVE-2018-7112

    The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.

    Published:Dec 3, 2018
    Last Modified:Nov 21, 2024
    EPS:Dec 3, 2018
    EPSS Score:0.00173
    CVSS Score:5.5

    Affected Products

    Vendor
    Hp
    Product
    Integrated Lights-out
    Vendor
    Hp
    Product
    Integrated Lights-out 2
    Vendor
    Hp
    Product
    Integrated Lights-out 2 Firmware
    Vendor
    Hp
    Product
    Integrated Lights-out 3 Firmware
    Vendor
    Hp
    Product
    Integrated Lights-out 4 Firmware
    Vendor
    Hp
    Product
    Proliant Bl280c G6 Server
    Vendor
    Hp
    Product
    Proliant Bl280c G6 Server Bladefirmware
    Vendor
    Hp
    Product
    Proliant Bl2x220c G6 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl2x220c G6 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl2x220c G7 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl2x220c G7 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl420c Gen8 Server
    Vendor
    Hp
    Product
    Proliant Bl420c Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Bl460c G6 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl460c G6 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl460c G7 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl460c G7 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl460c Gen8 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl460c Gen8 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl460c Gen9 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl460c Gen9 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl465c G7 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl465c G7 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl465c Gen8 \(amd\)
    Vendor
    Hp
    Product
    Proliant Bl465c Gen8 \(amd\) Firmware
    Vendor
    Hp
    Product
    Proliant Bl490c G6 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl490c G6 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl490c G7 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl490c G7 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl620c G7 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl620c G7 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl660c Gen8 Server
    Vendor
    Hp
    Product
    Proliant Bl660c Gen8 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl660c Gen9 Server
    Vendor
    Hp
    Product
    Proliant Bl660c Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Bl680c G7 Server Blade
    Vendor
    Hp
    Product
    Proliant Bl680c G7 Server Blade Firmware
    Vendor
    Hp
    Product
    Proliant Bl685c G7 Server Blade \(amd\)
    Vendor
    Hp
    Product
    Proliant Bl685c G7 Server Blade \(amd\) Firmware
    Vendor
    Hp
    Product
    Proliant Dl120 G6 Server
    Vendor
    Hp
    Product
    Proliant Dl120 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl120 G7 Server
    Vendor
    Hp
    Product
    Proliant Dl120 G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl120 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl120 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl160 G6 Server
    Vendor
    Hp
    Product
    Proliant Dl160 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl160 Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl160 Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl160 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl160 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl170e G6 Server
    Vendor
    Hp
    Product
    Proliant Dl170e G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl170h G6 Server
    Vendor
    Hp
    Product
    Proliant Dl170h G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl180 G6 Server
    Vendor
    Hp
    Product
    Proliant Dl180 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl180 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl180 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl20 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl20 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl320 G6 Server
    Vendor
    Hp
    Product
    Proliant Dl320 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl320e Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl320e Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl320e Gen8 V2 Server
    Vendor
    Hp
    Product
    Proliant Dl320e Gen8 V2 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl360 G6 Server
    Vendor
    Hp
    Product
    Proliant Dl360 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl360 G7 Server
    Vendor
    Hp
    Product
    Proliant Dl360 G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl360 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl360 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl360e Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl360e Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl360p Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl360p Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl370 G6 Server
    Vendor
    Hp
    Product
    Proliant Dl370 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl380 G6 Server
    Vendor
    Hp
    Product
    Proliant Dl380 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl380 G7 Server
    Vendor
    Hp
    Product
    Proliant Dl380 G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl380 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl380 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl380e Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl380e Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl380p Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl380p Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl385 G7 Server
    Vendor
    Hp
    Product
    Proliant Dl385 G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl385p Gen8 \(amd\)
    Vendor
    Hp
    Product
    Proliant Dl385p Gen8 \(amd\) Firmware
    Vendor
    Hp
    Product
    Proliant Dl560 Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl560 Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl560 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl560 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl580 G7 Server
    Vendor
    Hp
    Product
    Proliant Dl580 G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl580 Gen8 Server
    Vendor
    Hp
    Product
    Proliant Dl580 Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl585 G7 Server \(amd\)
    Vendor
    Hp
    Product
    Proliant Dl585 G7 Server \(amd\) Firmware
    Vendor
    Hp
    Product
    Proliant Dl60 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl60 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl80 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Dl80 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Dl980 G7 Server
    Vendor
    Hp
    Product
    Proliant Dl980 G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Gen6 Server
    Vendor
    Hp
    Product
    Proliant Gen7 Server
    Vendor
    Hp
    Product
    Proliant Gen8 Server
    Vendor
    Hp
    Product
    Proliant M300 Server Cartridge
    Vendor
    Hp
    Product
    Proliant M300 Server Cartridge Firmware
    Vendor
    Hp
    Product
    Proliant M350 Server Cartridge
    Vendor
    Hp
    Product
    Proliant M350 Server Cartridge Firmware
    Vendor
    Hp
    Product
    Proliant M510 Server Cartridge
    Vendor
    Hp
    Product
    Proliant M510 Server Cartridge Firmware
    Vendor
    Hp
    Product
    Proliant M710 Server Cartridge
    Vendor
    Hp
    Product
    Proliant M710 Server Cartridge Firmware
    Vendor
    Hp
    Product
    Proliant M710p Server Cartridge
    Vendor
    Hp
    Product
    Proliant M710p Server Cartridge Firmware
    Vendor
    Hp
    Product
    Proliant M710x Server Cartridge
    Vendor
    Hp
    Product
    Proliant M710x Server Cartridge Firmware
    Vendor
    Hp
    Product
    Proliant Microserver Gen8
    Vendor
    Hp
    Product
    Proliant Microserver Gen8 Firmware
    Vendor
    Hp
    Product
    Proliant Ml10 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Ml10 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml10 V2 Server
    Vendor
    Hp
    Product
    Proliant Ml10 V2 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml110 G6 Server
    Vendor
    Hp
    Product
    Proliant Ml110 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml110 G7 Server
    Vendor
    Hp
    Product
    Proliant Ml110 G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml110 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Ml110 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml150 G6 Server
    Vendor
    Hp
    Product
    Proliant Ml150 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml150 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Ml150 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml30 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Ml30 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml310e Gen8 Server
    Vendor
    Hp
    Product
    Proliant Ml310e Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml310e Gen8 V2 Server
    Vendor
    Hp
    Product
    Proliant Ml310e Gen8 V2 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml330 G6 Server
    Vendor
    Hp
    Product
    Proliant Ml330 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml350 G6 Server
    Vendor
    Hp
    Product
    Proliant Ml350 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml350 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Ml350 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml350e Gen8 Server
    Vendor
    Hp
    Product
    Proliant Ml350e Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml350e Gen8 V2 Server
    Vendor
    Hp
    Product
    Proliant Ml350e Gen8 V2 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml350p Gen8 Server
    Vendor
    Hp
    Product
    Proliant Ml350p Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ml370 G6 Server
    Vendor
    Hp
    Product
    Proliant Ml370 G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl160s G6 Server
    Vendor
    Hp
    Product
    Proliant Sl160s G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl170z G6 Server
    Vendor
    Hp
    Product
    Proliant Sl170z G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl210t Gen8 Server
    Vendor
    Hp
    Product
    Proliant Sl210t Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl250s Gen8 Server
    Vendor
    Hp
    Product
    Proliant Sl250s Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl270s Gen8 Server
    Vendor
    Hp
    Product
    Proliant Sl270s Gen8 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl2x170z G6 Server
    Vendor
    Hp
    Product
    Proliant Sl2x170z G6 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl390s G7 Server
    Vendor
    Hp
    Product
    Proliant Sl390s G7 Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl4540 Gen8 1 Node Server
    Vendor
    Hp
    Product
    Proliant Sl4540 Gen8 1 Node Server Firmware
    Vendor
    Hp
    Product
    Proliant Sl4545 G7 Server \(amd\)
    Vendor
    Hp
    Product
    Proliant Sl4545 G7 Server \(amd\) Firmware
    Vendor
    Hp
    Product
    Proliant Thin Micro Tm200 Server
    Vendor
    Hp
    Product
    Proliant Thin Micro Tm200 Server Firmware
    Vendor
    Hp
    Product
    Proliant Ws460c Gen9 Workstation
    Vendor
    Hp
    Product
    Proliant Ws460c Gen9 Workstation Firmware
    Vendor
    Hp
    Product
    Proliant Xl170r Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl170r Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl190r Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl190r Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl230a Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl230a Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl250a Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl250a Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl260a Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl260a Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl270d Gen9 Accelerator Tray
    Vendor
    Hp
    Product
    Proliant Xl270d Gen9 Accelerator Tray Firmware
    Vendor
    Hp
    Product
    Proliant Xl270d Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl270d Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl450 Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl450 Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl730f Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl730f Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl740f Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl740f Gen9 Server Firmware
    Vendor
    Hp
    Product
    Proliant Xl750f Gen9 Server
    Vendor
    Hp
    Product
    Proliant Xl750f Gen9 Server Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-28092 (CVSS 6.1) — A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability c…
    CVE-2018-7113 (CVSS 6.6) — A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to b…
    CVE-2018-7101 (CVSS 7.5) — A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4…
    CVE-2018-7105 (CVSS 7.2) — A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Inte…
    CVE-2018-7093 (CVSS 8.6) — A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v…
    CVE-2018-7078 (CVSS 7.2) — A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and H…
    CVE-2017-8987 (CVSS 8.6) — A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3)…
    CVE-2016-4406 (CVSS 6.1) — A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO…
    CVE-2017-8979 (CVSS 9.8) — Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to al…
    CVE-2017-12543 (CVSS 6.5) — A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 …

    References

    http://www.securitytracker.com/id/1041984
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us
    http://www.securitytracker.com/id/1041984
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High