CVE Feed

    Dashboard / CVE / CVE-2022-28637

    CVE-2022-28637

    A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities.

    Published:Sep 20, 2022
    Last Modified:May 27, 2025
    EPS:Sep 20, 2022
    EPSS Score:0.00147
    CVSS Score:7.8

    Affected Products

    Vendor
    Hp
    Product
    Apollo 4200 Gen10 Server
    Vendor
    Hp
    Product
    Apollo 4500
    Vendor
    Hp
    Product
    Apollo R2000 Chassis
    Vendor
    Hpe
    Product
    Apollo 2000 Gen10 Plus System
    Vendor
    Hpe
    Product
    Apollo 4200 Gen10 Plus System
    Vendor
    Hpe
    Product
    Apollo 4510 Gen10 System
    Vendor
    Hpe
    Product
    Apollo 6500 Gen10 Plus
    Vendor
    Hpe
    Product
    Apollo N2600 Gen10 Plus
    Vendor
    Hpe
    Product
    Apollo N2800 Gen10 Plus
    Vendor
    Hpe
    Product
    Apollo R2600 Gen10
    Vendor
    Hpe
    Product
    Apollo R2800 Gen10
    Vendor
    Hpe
    Product
    Edgeline E920 Server Blade
    Vendor
    Hpe
    Product
    Edgeline E920d Server Blade
    Vendor
    Hpe
    Product
    Edgeline E920t Server Blade
    Vendor
    Hpe
    Product
    Integrated Lights-out 5
    Vendor
    Hpe
    Product
    Integrated Lights-out 5 Firmware
    Vendor
    Hpe
    Product
    Proliant Bl460c Gen10 Server Blade
    Vendor
    Hpe
    Product
    Proliant Dl110 Gen10 Plus Telco Server
    Vendor
    Hpe
    Product
    Proliant Dl160 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl180 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl20 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl20 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl325 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl325 Gen10 Plus V2 Server
    Vendor
    Hpe
    Product
    Proliant Dl325 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl345 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl360 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl360 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl365 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl380 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl380 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl385 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dl385 Gen10 Plus V2 Server
    Vendor
    Hpe
    Product
    Proliant Dl385 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl560 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl580 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dx170r Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dx190r Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dx220n Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dx325 Gen10 Plus V2 Server
    Vendor
    Hpe
    Product
    Proliant Dx360 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dx360 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dx380 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dx380 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dx385 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Dx385 Gen10 Plus V2 Server
    Vendor
    Hpe
    Product
    Proliant Dx4200 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dx560 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant E910 Server Blade
    Vendor
    Hpe
    Product
    Proliant E910t Server Blade
    Vendor
    Hpe
    Product
    Proliant M750 Server Blade
    Vendor
    Hpe
    Product
    Proliant Microserver Gen10 Plus
    Vendor
    Hpe
    Product
    Proliant Ml110 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Ml30 Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Ml30 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Ml350 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl170r Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl190r Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl220n Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Xl225n Gen10 Plus 1u Node
    Vendor
    Hpe
    Product
    Proliant Xl230k Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl270d Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl290n Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Xl420 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl450 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Xl645d Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Xl675d Gen10 Plus Server
    Vendor
    Hpe
    Product
    Proliant Xl925g Gen10 Plus 1u 4-node Configure-to-order Server
    Vendor
    Hpe
    Product
    Storage File Controller
    Vendor
    Hpe
    Product
    Storage Performance File Controller
    Vendor
    Hpe
    Product
    Storeeasy 1460 Storage
    Vendor
    Hpe
    Product
    Storeeasy 1560 Storage
    Vendor
    Hpe
    Product
    Storeeasy 1660 Expanded Storage
    Vendor
    Hpe
    Product
    Storeeasy 1660 Performance Storage
    Vendor
    Hpe
    Product
    Storeeasy 1660 Storage
    Vendor
    Hpe
    Product
    Storeeasy 1860 Performance Storage
    Vendor
    Hpe
    Product
    Storeeasy 1860 Storage

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High