CVE-2018-7101

Опубликовано: 27 сент. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.

Ссылки

http://www.securitytracker.com/id/1041488
Third Party Advisory
VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03875en_us
Vendor Advisory
http://www.securitytracker.com/id/1041488
Third Party Advisory
VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03875en_us
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*

Версия до 2.60 (исключая)

cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:hp:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*

Версия до 1.30 (исключая)

Одно из

cpe:2.3:h:hp:proliant_bl460c_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl120_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl160_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl180_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl360_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl380_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl385_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl560_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_dl580_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_ml110_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_ml350_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_xl170r_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_xl190r_gen10_server:-:*:*:*:*:*:*:*

cpe:2.3:h:hp:proliant_xl230k_gen10_server:-:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.0474

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-52mp-r7pc-2454