9

CVE-2008-4722

EPSS 1.39%
Published 23.10.2008 22:00:01
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Sun ≫ Integrated Lights-out Manager

Sun ≫ Blade 6000 Modular System With Chassis Version <= 2.0

Sun ≫ Blade 6048 Modular System With Chassis Version <= 2.0

Sun ≫ Blade 8000 Modular System Version <= 2.1.1

Sun ≫ Blade 8000p Modular System Version <= 2.1.1

Sun ≫ Blade T6320 Server Module Version <= 7.1.6

Sun ≫ Blade X6220 With Server Module Software Version <= 2.0

Sun ≫ Blade X6250 With Server Module Software Version <= 2.0

Sun ≫ Blade X6450 With Server Module Software Version <= 2.0

Sun ≫ Blade X8400 Version <= 2.0.2

Sun ≫ Blade X8420 Version <= 2.0.2

Sun ≫ Blade X8440 Version <= 2.0.2

Sun ≫ Blade X8450 Version <= 2.1

Sun ≫ Fire X2250 Server Version <= sw_1.1

Sun ≫ Fire X4100 Server Version <= sw_1.5.1

Sun ≫ Fire X4100m2 Server Version <= sw_2.1

Sun ≫ Fire X4140 Server Version <= sw_2.1

Sun ≫ Fire X4150 Server Version <= sw_2.0

Sun ≫ Fire X4200 Server Version <= sw_1.5.1

Sun ≫ Fire X4200m2 Server Version <= sw_2.1

Sun ≫ Fire X4240 Server Version <= sw_2.1

Sun ≫ Fire X4250 Server Version <= sw_1.1

Sun ≫ Fire X4440 Server Version <= sw_2.1

Sun ≫ Fire X4450 Server Version <= sw_2.1.0

Sun ≫ Fire X4500 Server Version <= sw_1.5

Sun ≫ Fire X4540 Server Version <= sw_1.0

Sun ≫ Fire X4600 Server Version <= sw_1.4

Sun ≫ Fire X4600m2 Server Version <= sw_2.1.2

Sun ≫ Netra Update7.1.6 Version <= cp3260_atca_blade_server

Sun ≫ Netra Update7.1.6 Version <= t5220_server

Sun ≫ Netra Update7.1.4a Version <= t5440_server

Sun ≫ Netra X4200m2 Server Version <= sw_2.1

Sun ≫ Netra X4250 Server Version <= sw_1.1

Sun ≫ Netra X4450 Version <= sw_1.1

Sun ≫ Sparc Enterprise Server T5120 Version <= 7.1.6

Sun ≫ Sparc Enterprise Server T5140 Version <= 7.1.6

Sun ≫ Sparc Enterprise Server T5220 Version <= 7.1.6

Sun ≫ Sparc Enterprise Server T5240 Version <= 7.1.6

Sun ≫ Sparc Enterprise Server T5440 Version <= 7.1.5b

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.39%	0.785

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://secunia.com/advisories/32298

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1

http://www.securityfocus.com/bid/31861

http://www.securitytracker.com/id?1021094

http://www.vupen.com/english/advisories/2008/2890

https://exchange.xforce.ibmcloud.com/vulnerabilities/46023

https://nvd.nist.gov/vuln/detail/CVE-2008-4722

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4722

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4722

EUVD