5.5

CVE-2018-7112

EPSS 0.67%
Veröffentlicht 03.12.2018 15:29:00
Zuletzt bearbeitet 21.11.2024 04:11:39
Erkennungen
Login

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 8

NVD 101 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Integrated Lights-out 2 Firmware Version < 2.33

Hp ≫ Integrated Lights-out 2 Version -
Hp ≫ Proliant Gen6 Server Version -

Hp ≫ Integrated Lights-out 3 Firmware Version < 1.90

Hp ≫ Integrated Lights-out Version -
Hp ≫ Proliant Gen7 Server Version -

Hp ≫ Integrated Lights-out 4 Firmware Version < 2.60

Hp ≫ Integrated Lights-out Version -
Hp ≫ Proliant Gen8 Server Version -

Hp ≫ Proliant Xl750f Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl750f Gen9 Server Version -

Hp ≫ Proliant Xl740f Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl740f Gen9 Server Version -

Hp ≫ Proliant Xl730f Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl730f Gen9 Server Version -

Hp ≫ Proliant Xl450 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl450 Gen9 Server Version -

Hp ≫ Proliant Xl270d Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl270d Gen9 Server Version -

Hp ≫ Proliant Xl270d Gen9 Accelerator Tray Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl270d Gen9 Accelerator Tray Version -

Hp ≫ Proliant Xl260a Gen9 Server Firmware Version < 1.60_01-22-2018

Hp ≫ Proliant Xl260a Gen9 Server Version -

Hp ≫ Proliant Xl250a Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl250a Gen9 Server Version -

Hp ≫ Proliant Xl230a Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl230a Gen9 Server Version -

Hp ≫ Proliant Xl190r Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl190r Gen9 Server Version -

Hp ≫ Proliant Xl170r Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Xl170r Gen9 Server Version -

Hp ≫ Proliant Dl560 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl560 Gen9 Server Version -

Hp ≫ Proliant Dl380 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl380 Gen9 Server Version -

Hp ≫ Proliant Dl360 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl360 Gen9 Server Version -

Hp ≫ Proliant Dl180 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl180 Gen9 Server Version -

Hp ≫ Proliant Dl160 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl160 Gen9 Server Version -

Hp ≫ Proliant Dl120 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl120 Gen9 Server Version -

Hp ≫ Proliant Dl80 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl80 Gen9 Server Version -

Hp ≫ Proliant Dl60 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl60 Gen9 Server Version -

Hp ≫ Proliant Dl20 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Dl20 Gen9 Server Version -

Hp ≫ Proliant Ml350 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Ml350 Gen9 Server Version -

Hp ≫ Proliant Ml150 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Ml150 Gen9 Server Version -

Hp ≫ Proliant Ml110 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Ml110 Gen9 Server Version -

Hp ≫ Proliant Ml30 Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Ml30 Gen9 Server Version -

Hp ≫ Proliant Ml10 Gen9 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Ml10 Gen9 Server Version -

Hp ≫ Proliant Bl660c Gen9 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Bl660c Gen9 Server Version -

Hp ≫ Proliant Bl460c Gen9 Server Blade Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Bl460c Gen9 Server Blade Version -

Hp ≫ Proliant Ws460c Gen9 Workstation Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Ws460c Gen9 Workstation Version -

Hp ≫ Proliant Dl380e Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl380e Gen8 Server Version -

Hp ≫ Proliant Dl360p Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl360p Gen8 Server Version -

Hp ≫ Proliant Dl360e Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl360e Gen8 Server Version -

Hp ≫ Proliant Dl320e Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl320e Gen8 Server Version -

Hp ≫ Proliant Dl320e Gen8 V2 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl320e Gen8 V2 Server Version -

Hp ≫ Proliant Dl160 Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl160 Gen8 Server Version -

Hp ≫ Proliant Sl250s Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Sl250s Gen8 Server Version -

Hp ≫ Proliant Sl210t Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Sl210t Gen8 Server Version -

Hp ≫ Proliant Bl660c Gen8 Server Blade Firmware Version < 2018.01.22

Hp ≫ Proliant Bl660c Gen8 Server Version -

Hp ≫ Proliant Bl465c Gen8 (amd) Firmware Version < 2018.03.14

Hp ≫ Proliant Bl465c Gen8 (amd) Version -

Hp ≫ Proliant Bl460c Gen8 Server Blade Firmware Version < 2018.01.22

Hp ≫ Proliant Bl460c Gen8 Server Blade Version -

Hp ≫ Proliant Bl420c Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Bl420c Gen8 Server Version -

Hp ≫ Proliant Sl4540 Gen8 1 Node Server Firmware Version < 2018.01.22

Hp ≫ Proliant Sl4540 Gen8 1 Node Server Version -

Hp ≫ Proliant Sl270s Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Sl270s Gen8 Server Version -

Hp ≫ Proliant Dl580 Gen8 Server Firmware Version < 2.00_02-22-2018

Hp ≫ Proliant Dl580 Gen8 Server Version -

Hp ≫ Proliant Dl560 Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl560 Gen8 Server Version -

Hp ≫ Proliant Dl380p Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Dl380p Gen8 Server Version -

Hp ≫ Proliant Dl385p Gen8 (amd) Firmware Version < 2018.03.14

Hp ≫ Proliant Dl385p Gen8 (amd) Version -

Hp ≫ Proliant Ml350e Gen8 V2 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Ml350e Gen8 V2 Server Version -

Hp ≫ Proliant Ml350e Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Ml350e Gen8 Server Version -

Hp ≫ Proliant Ml350p Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Ml350p Gen8 Server Version -

Hp ≫ Proliant Ml310e Gen8 V2 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Ml310e Gen8 V2 Server Version -

Hp ≫ Proliant Ml310e Gen8 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Ml310e Gen8 Server Version -

Hp ≫ Proliant Microserver Gen8 Firmware Version < 2018.01.22

Hp ≫ Proliant Microserver Gen8 Version -

Hp ≫ Proliant M710 Server Cartridge Firmware Version < 2018.01.22

Hp ≫ Proliant M710 Server Cartridge Version -

Hp ≫ Proliant M710p Server Cartridge Firmware Version < 2018.01.22

Hp ≫ Proliant M710p Server Cartridge Version -

Hp ≫ Proliant M710x Server Cartridge Firmware Version < 1.64_01-22-2018

Hp ≫ Proliant M710x Server Cartridge Version -

Hp ≫ Proliant M510 Server Cartridge Firmware Version < 1.64_01-22-2018

Hp ≫ Proliant M510 Server Cartridge Version -

Hp ≫ Proliant M350 Server Cartridge Firmware Version < 2018.01.22

Hp ≫ Proliant M350 Server Cartridge Version -

Hp ≫ Proliant M300 Server Cartridge Firmware Version < 2018.01.22

Hp ≫ Proliant M300 Server Cartridge Version -

Hp ≫ Proliant Bl2x220c G7 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl2x220c G7 Server Blade Version -

Hp ≫ Proliant Dl585 G7 Server (amd) Firmware Version < 2018.03.14

Hp ≫ Proliant Dl585 G7 Server (amd) Version -

Hp ≫ Proliant Dl980 G7 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl980 G7 Server Version -

Hp ≫ Proliant Dl580 G7 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl580 G7 Server Version -

Hp ≫ Proliant Dl385 G7 Server Firmware Version < 2018.03.14

Hp ≫ Proliant Dl385 G7 Server Version -

Hp ≫ Proliant Dl380 G7 Server Firmware Version -

Hp ≫ Proliant Dl380 G7 Server Version -

Hp ≫ Proliant Dl120 G7 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl120 G7 Server Version -

Hp ≫ Proliant Dl360 G7 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl360 G7 Server Version -

Hp ≫ Proliant Bl685c G7 Server Blade (amd) Firmware Version < 2018.03.14

Hp ≫ Proliant Bl685c G7 Server Blade (amd) Version -

Hp ≫ Proliant Bl680c G7 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl680c G7 Server Blade Version -

Hp ≫ Proliant Bl620c G7 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl620c G7 Server Blade Version -

Hp ≫ Proliant Bl490c G7 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl490c G7 Server Blade Version -

Hp ≫ Proliant Bl465c G7 Server Blade Firmware Version < 2018.03.14

Hp ≫ Proliant Bl465c G7 Server Blade Version -

Hp ≫ Proliant Bl460c G7 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl460c G7 Server Blade Version -

Hp ≫ Proliant Sl390s G7 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Sl390s G7 Server Version -

Hp ≫ Proliant Ml110 G7 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Ml110 G7 Server Version -

Hp ≫ Proliant Ml10 V2 Server Firmware Version < 2018.01.22

Hp ≫ Proliant Ml10 V2 Server Version -

Hp ≫ Proliant Sl4545 G7 Server (amd) Firmware Version 2018.03.14(a)

Hp ≫ Proliant Sl4545 G7 Server (amd) Version -

Hp ≫ Proliant Thin Micro Tm200 Server Firmware Version < 2.56_01-22-2018

Hp ≫ Proliant Thin Micro Tm200 Server Version -

Hp ≫ Proliant Dl380 G6 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl380 G6 Server Version -

Hp ≫ Proliant Dl370 G6 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl370 G6 Server Version -

Hp ≫ Proliant Dl360 G6 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl360 G6 Server Version -

Hp ≫ Proliant Dl320 G6 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Dl320 G6 Server Version -

Hp ≫ Proliant Dl180 G6 Server Firmware

Hp ≫ Proliant Dl180 G6 Server Version -

Hp ≫ Proliant Dl170h G6 Server Firmware

Hp ≫ Proliant Dl170h G6 Server Version -

Hp ≫ Proliant Dl170e G6 Server Firmware

Hp ≫ Proliant Dl170e G6 Server Version -

Hp ≫ Proliant Dl160 G6 Server Firmware

Hp ≫ Proliant Dl160 G6 Server Version -

Hp ≫ Proliant Dl120 G6 Server Firmware

Hp ≫ Proliant Dl120 G6 Server Version -

Hp ≫ Proliant Ml370 G6 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Ml370 G6 Server Version -

Hp ≫ Proliant Ml350 G6 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Ml350 G6 Server Version -

Hp ≫ Proliant Ml330 G6 Server Firmware Version < 2018.05.21

Hp ≫ Proliant Ml330 G6 Server Version -

Hp ≫ Proliant Ml150 G6 Server Firmware

Hp ≫ Proliant Ml150 G6 Server Version -

Hp ≫ Proliant Ml110 G6 Server Firmware

Hp ≫ Proliant Ml110 G6 Server Version -

Hp ≫ Proliant Sl2x170z G6 Server Firmware

Hp ≫ Proliant Sl2x170z G6 Server Version -

Hp ≫ Proliant Bl490c G6 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl490c G6 Server Blade Version -

Hp ≫ Proliant Bl460c G6 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl460c G6 Server Blade Version -

Hp ≫ Proliant Sl170z G6 Server Firmware

Hp ≫ Proliant Sl170z G6 Server Version -

Hp ≫ Proliant Sl160s G6 Server Firmware

Hp ≫ Proliant Sl160s G6 Server Version -

Hp ≫ Proliant Bl2x220c G6 Server Blade Firmware Version < 2018.05.21

Hp ≫ Proliant Bl2x220c G6 Server Blade Version -

Hp ≫ Proliant Bl280c G6 Server Bladefirmware Version < 2018.05.21

Hp ≫ Proliant Bl280c G6 Server Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.67%	0.47

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:C/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us

Vendor Advisory

Not Applicable

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us

Vendor Advisory

Not Applicable

http://www.securitytracker.com/id/1041984

Third Party Advisory

VDB Entry

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us

Vendor Advisory

Not Applicable

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-7112

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-7112

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-7112

EUVD