PT-2018-17893 · Hewlett Packard · Hpe Integrated Lights-Out 5+4

Publicado 2018-06-26 · Atualizado 2018-10-05 · CVE-2018-7078

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 4 versions prior to v2.60 HPE Integrated Lights-Out 5 versions prior to v1.30 HPE iLO Moonshot versions prior to 2.55 HPE Moonshot iLO Chassis Manager versions prior to 1.58

Description A remote code execution issue was identified, allowing an administrative user to execute code remotely or locally. This could be exploited by an administrative user to gain unauthorized access.

Recommendations For HPE Integrated Lights-Out 4 versions prior to v2.60, update to version v2.60 or later. For HPE Integrated Lights-Out 5 versions prior to v1.30, update to version v1.30 or later. For HPE iLO Moonshot versions prior to 2.55, update to version 2.55 or later. For HPE Moonshot iLO Chassis Manager versions prior to 1.58, update to version 1.58 or later.

Correção

Identificadores relacionados

CVE-2018-7078

Produtos afetados

Hpe Integrated Lights-Out 4

Hpe Integrated Lights-Out 5

Hpe Moonshot Ilo Chassis Manager

Hpe Ilo

Hpe Ilo Moonshot

Referências · 4

• http://securitytracker.com/id/1041188 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7078 · Nota de Segurança
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03844en_us · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-7078 · Aviso do Fabricante