PT-2018-17898 · Hewlett Packard · Moonshot Component Pack+5

Publicado 2018-08-07 · Atualizado 2019-10-03 · CVE-2018-7093

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 versions prior to 1.90 HPE Integrated Lights-Out 4 versions prior to 2.60 HPE Integrated Lights-Out 5 versions prior to 1.30 Moonshot Chassis Manager firmware versions prior to 1.58 Moonshot Component Pack versions prior to 2.55

Description A security issue in the mentioned HPE products could be remotely exploited to create a denial of service. This allows an attacker to disrupt the service, making it unavailable to users.

Recommendations For HPE Integrated Lights-Out 3 versions prior to 1.90, update to version 1.90 or later. For HPE Integrated Lights-Out 4 versions prior to 2.60, update to version 2.60 or later. For HPE Integrated Lights-Out 5 versions prior to 1.30, update to version 1.30 or later. For Moonshot Chassis Manager firmware versions prior to 1.58, update to version 1.58 or later. For Moonshot Component Pack versions prior to 2.55, update to version 2.55 or later.

Correção

Identificadores relacionados

CVE-2018-7093

Produtos afetados

Hpe Integrated Lights-Out 3

Hpe Integrated Lights-Out 4

Hpe Integrated Lights-Out 5

Hpe Ilo

Moonshot Chassis Manager

Moonshot Component Pack

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-7093 · Nota de Segurança
• http://securitytracker.com/id/1041435 · Nota
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-7093 · Aviso do Fabricante