7.5

CVE-2022-23704

EPSS 0.5%
Published 09.05.2022 21:15:08
Last modified 21.11.2024 06:49:08
Source security-alert@hpe.com
Teams watchlist Login
Open Login

A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Hp ≫ Integrated Lights-out 4 Version < 2.80

   Hpe ≫ Apollo 4200 Gen9 Server Version-
   Hpe ≫ Proliant Bl420c Gen8 Server Version-
   Hpe ≫ Proliant Bl460c Gen8 Server Blade Version-
   Hpe ≫ Proliant Bl460c Gen9 Server Blade Version-
   Hpe ≫ Proliant Bl465c Gen8 Server Blade Version-
   Hpe ≫ Proliant Bl660c Gen8 Server Blade Version-
   Hpe ≫ Proliant Bl660c Gen9 Server Version-
   Hpe ≫ Proliant Dl120 Gen9 Server Version-
   Hpe ≫ Proliant Dl160 Gen8 Server Version-
   Hpe ≫ Proliant Dl160 Gen9 Server Version-
   Hpe ≫ Proliant Dl180 Gen9 Server Version-
   Hpe ≫ Proliant Dl20 Gen9 Server Version-
   Hpe ≫ Proliant Dl320e Gen8 Server Version-
   Hpe ≫ Proliant Dl320e Gen8 V2 Server Version-
   Hpe ≫ Proliant Dl360 Gen9 Server Version-
   Hpe ≫ Proliant Dl360e Gen8 Server Version-
   Hpe ≫ Proliant Dl360p Gen8 Server Version-
   Hpe ≫ Proliant Dl380 Gen9 Server Version-
   Hpe ≫ Proliant Dl380e Gen8 Server Version-
   Hpe ≫ Proliant Dl380p Gen8 Server Version-
   Hpe ≫ Proliant Dl385p Gen8 Version-
   Hpe ≫ Proliant Dl560 Gen8 Server Version-
   Hpe ≫ Proliant Dl560 Gen9 Server Version-
   Hpe ≫ Proliant Dl580 Gen8 Server Version-
   Hpe ≫ Proliant Dl580 Gen9 Server Version-
   Hpe ≫ Proliant Dl60 Gen9 Server Version-
   Hpe ≫ Proliant Dl80 Gen9 Server Version-
   Hpe ≫ Proliant Ec200a Server Version-
   Hpe ≫ Proliant Microserver Gen8 Version-
   Hpe ≫ Proliant Ml110 Gen9 Server Version-
   Hpe ≫ Proliant Ml150 Gen9 Server Version-
   Hpe ≫ Proliant Ml30 Gen9 Server Version-
   Hpe ≫ Proliant Ml310e Gen8 Server Version-
   Hpe ≫ Proliant Ml310e Gen8 V2 Server Version-
   Hpe ≫ Proliant Ml350 Gen9 Server Version-
   Hpe ≫ Proliant Ml350e Gen8 V2 Server Version-
   Hpe ≫ Proliant Ml350p Gen8 Server Version-
   Hpe ≫ Proliant Sl210t Gen8 Server Version-
   Hpe ≫ Proliant Sl230s Gen8 Server Version-
   Hpe ≫ Proliant Sl250s Gen8 Server Version-
   Hpe ≫ Proliant Sl270s Gen8 Se Server Version-
   Hpe ≫ Proliant Sl270s Gen8 Server Version-
   Hpe ≫ Proliant Sl4540 Gen8 1 Node Server Version-
   Hpe ≫ Proliant Ws460c Gen8 Graphics Server Blade Version-
   Hpe ≫ Proliant Ws460c Gen9 Graphics Server Blade Version-
   Hpe ≫ Proliant Xl170r Gen9 Server Version-
   Hpe ≫ Proliant Xl190r Gen9 Server Version-
   Hpe ≫ Proliant Xl220a Gen8 V2 Server Version-
   Hpe ≫ Proliant Xl230a Gen9 Server Version-
   Hpe ≫ Proliant Xl250a Gen9 Server Version-
   Hpe ≫ Proliant Xl450 Gen9 Server Version-
   Hpe ≫ Proliant Xl730f Gen9 Server Version-
   Hpe ≫ Proliant Xl740f Gen9 Server Version-
   Hpe ≫ Proliant Xl750f Gen9 Server Version-
   Hpe ≫ Synergy 480 Gen9 Compute Module Version-
   Hpe ≫ Synergy 620 Gen9 Compute Module Version-
   Hpe ≫ Synergy 660 Gen9 Compute Module Version-
   Hpe ≫ Synergy 680 Gen9 Compute Module Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.5%	0.647

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04240en_us

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-23704

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-23704

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-23704

EUVD