5.3

CVE-2020-7202

EPSS 0.26%
Published 05.01.2021 15:15:14
Last modified 21.11.2024 05:36:49
Source security-alert@hpe.com
Teams watchlist Login
Open Login

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Hp ≫ Integrated Lights-out 4 Version < 2.76

   Hp ≫ Apollo 4200 Gen9 Server Version-
   Hp ≫ Convergedsystem Cs700 Version-
   Hp ≫ Convergedsystem Cs700x Version-
   Hp ≫ Proliant Bl420c Gen8 Server Version-
   Hp ≫ Proliant Bl460c Gen8 Server Blade Version-
   Hp ≫ Proliant Bl460c Gen9 Server Blade Version-
   Hp ≫ Proliant Bl465c Gen8 Server Blade Version-
   Hp ≫ Proliant Bl660c Gen8 Server Blade Version-
   Hp ≫ Proliant Bl660c Gen9 Server Version-
   Hp ≫ Proliant Dl120 Gen9 Server Version-
   Hp ≫ Proliant Dl160 Gen8 Server Version-
   Hp ≫ Proliant Dl160 Gen9 Server Version-
   Hp ≫ Proliant Dl180 Gen9 Server Version-
   Hp ≫ Proliant Dl320e Gen8 Server Version-
   Hp ≫ Proliant Dl320e Gen8 V2 Server Version-
   Hp ≫ Proliant Dl360 Gen9 Server Version-
   Hp ≫ Proliant Dl360e Gen8 Server Version-
   Hp ≫ Proliant Dl360p Gen8 Server Version-
   Hp ≫ Proliant Dl380 Gen9 Server Version-
   Hp ≫ Proliant Dl380e Gen8 Server Version-
   Hp ≫ Proliant Dl380p Gen8 Server Version-
   Hp ≫ Proliant Dl385p Gen8 (amd) Version-
   Hp ≫ Proliant Dl560 Gen8 Server Version-
   Hp ≫ Proliant Dl560 Gen9 Server Version-
   Hp ≫ Proliant Dl580 Gen8 Server Version-
   Hp ≫ Proliant Dl580 Gen9 Server Version-
   Hp ≫ Proliant Dl60 Gen9 Server Version-
   Hp ≫ Proliant Dl80 Gen9 Server Version-
   Hp ≫ Proliant Microserver Gen8 Version-
   Hp ≫ Proliant Ml110 Gen9 Server Version-
   Hp ≫ Proliant Ml30 Gen9 Server Version-
   Hp ≫ Proliant Ml310e Gen8 Server Version-
   Hp ≫ Proliant Ml310e Gen8 V2 Server Version-
   Hp ≫ Proliant Ml350 Gen9 Server Version-
   Hp ≫ Proliant Ml350e Gen8 Server Version-
   Hp ≫ Proliant Ml350e Gen8 V2 Server Version-
   Hp ≫ Proliant Ml350p Gen8 Server Version-
   Hp ≫ Proliant Sl210t Gen8 Server Version-
   Hp ≫ Proliant Sl230s Gen8 Server Version-
   Hp ≫ Proliant Sl250s Gen8 Server Version-
   Hp ≫ Proliant Sl270s Gen8 Se Server Version-
   Hp ≫ Proliant Sl270s Gen8 Server Version-
   Hp ≫ Proliant Sl4540 Gen8 3 Node Server Version-
   Hp ≫ Proliant Ws460c Gen8 Graphics Server Blade Version-
   Hp ≫ Proliant Ws460c Gen9 Graphics Server Blade Version-
   Hp ≫ Proliant Xl170r Gen9 Server Version-
   Hp ≫ Proliant Xl190r Gen9 Server Version-
   Hp ≫ Proliant Xl220a Gen8 V2 Server Version-
   Hp ≫ Proliant Xl230a Gen9 Server Version-
   Hp ≫ Proliant Xl250a Gen9 Server Version-
   Hp ≫ Proliant Xl450 Gen9 Server Version-
   Hp ≫ Proliant Xl730f Gen9 Server Version-
   Hp ≫ Proliant Xl740f Gen9 Server Version-
   Hp ≫ Proliant Xl750f Gen9 Server Version-
   Hp ≫ Synergy 480 Gen9 Compute Module Version-

Hp ≫ Integrated Lights-out 5 Version < 2.31

   Hp ≫ Apollo 4200 Gen10 Server Version-
   Hp ≫ Apollo 4510 System Version-
   Hp ≫ Apollo R2000 Chassis Version-
   Hp ≫ Convergedsystem Cs700 Version-
   Hp ≫ Convergedsystem Cs700x Version-
   Hp ≫ Proliant Bl460c Gen10 Server Blade Version-
   Hp ≫ Proliant Dl120 Gen10 Server Version-
   Hp ≫ Proliant Dl160 Gen10 Server Version-
   Hp ≫ Proliant Dl180 Gen10 Server Version-
   Hp ≫ Proliant Dl20 Gen10 Server Version-
   Hp ≫ Proliant Dl325 Gen10 Plus Server Version-
   Hp ≫ Proliant Dl325 Gen10 Server Version-
   Hp ≫ Proliant Dl360 Gen10 Server Version-
   Hp ≫ Proliant Dl380 Gen10 Server Version-
   Hp ≫ Proliant Dl385 Gen10 Plus Server Version-
   Hp ≫ Proliant Dl385 Gen10 Server Version-
   Hp ≫ Proliant Dl560 Gen10 Server Version-
   Hp ≫ Proliant Dl580 Gen10 Server Version-
   Hp ≫ Proliant Ml110 Gen10 Server Version-
   Hp ≫ Proliant Ml30 Gen10 Server Version-
   Hp ≫ Proliant Ml350 Gen10 Server Version-
   Hp ≫ Proliant Xl170r Gen10 Server Version-
   Hp ≫ Proliant Xl190r Gen10 Server Version-
   Hp ≫ Proliant Xl230k Gen10 Server Version-
   Hp ≫ Proliant Xl270d Gen10 Server Version-
   Hp ≫ Proliant Xl450 Gen10 Server Version-
   Hp ≫ Synergy 480 Gen10 Compute Module Version-
   Hp ≫ Synergy 660 Gen10 Compute Module Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.26%	0.49

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04069en_us

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-7202

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-7202

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-7202

EUVD