8.3

CVE-2019-11983

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Integrated Lights-out 5 Firmware Version <= 1.39
   Hp ≫ Proliant Bl460c Gen10 Version-
   Hp ≫ Proliant Dl120 Gen10 Version-
   Hp ≫ Proliant Dl160 Gen10 Version-
   Hp ≫ Proliant Dl180 Gen10 Version-
   Hp ≫ Proliant Dl20 Gen10 Version-
   Hp ≫ Proliant Dl325 Gen10 Version-
   Hp ≫ Proliant Dl360 Gen10 Version-
   Hp ≫ Proliant Dl380 Gen10 Version-
   Hp ≫ Proliant Dl385 Gen10 Version-
   Hp ≫ Proliant Dl560 Gen10 Version-
   Hp ≫ Proliant Dl580 Gen10 Version-
   Hp ≫ Proliant Microserver Gen10 Version-
   Hp ≫ Proliant Ml110 Gen10 Version-
   Hp ≫ Proliant Ml350 Gen10 Version-
   Hp ≫ Proliant Xl170r Gen10 Version-
   Hp ≫ Proliant Xl190r Gen10 Version-
   Hp ≫ Proliant Xl230k Gen10 Version-
   Hp ≫ Proliant Xl450 Gen10 Version-
Hp ≫ Integrated Lights-out 4 Firmware Version <= 2.61b
   Hp ≫ Proliant Bl460c Gen9 Version-
   Hp ≫ Proliant Dl120 Gen9 Version-
   Hp ≫ Proliant Dl180 Gen9 Version-
   Hp ≫ Proliant Dl360 Gen9 Version-
   Hp ≫ Proliant Dl380 Gen9 Version-
   Hp ≫ Proliant Dl580 Gen9 Version-
   Hp ≫ Proliant Ml10 Gen9 Version2
   Hp ≫ Proliant Ml110 Gen9 Version-
   Hp ≫ Proliant Ml150 Gen9 Version-
   Hp ≫ Proliant Ml30 Gen9 Version2
   Hp ≫ Proliant Ml350 Gen9 Version-
   Hp ≫ Proliant Ws460c Gen9 Version-
   Hp ≫ Proliant Xl170r Gen9 Version-
   Hp ≫ Proliant Xl190r Gen9 Version-
   Hp ≫ Proliant Xl230a Gen9 Version-
   Hp ≫ Proliant Xl250a Gen9 Version-
   Hp ≫ Proliant Xl730f Gen9
   Hp ≫ Proliant Xl740f Gen9 Version-
   Hp ≫ Proliant Xl750f Gen9 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.66% 0.687
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7 2.2 4.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
nvd@nist.gov 8.3 8.6 8.5
AV:N/AC:M/Au:N/C:P/I:P/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.