PT-2022-16214 · Hewlett Packard · Hpe Integrated Lights-Out 4+1

Published 2022-04-11 · Updated 2022-05-19 · CVE-2022-23704

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Integrated Lights-Out 4 (iLO 4) versions prior to 2.80

Description A potential security issue has been identified, which could allow remote Denial of Service.

Recommendations For versions prior to 2.80, update to version 2.80 or later to resolve the issue.

Fix

Related Identifiers

CVE-2022-23704

Affected Products

Hpe Ilo

Hpe Integrated Lights-Out 4

References · 5

• https://osv.dev/vulnerability/CVE-2022-23704 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23704 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04240en_us · Vendor Advisory
• https://t.me/cvenotify/30439 · Telegram Post
• https://t.me/cibsecurity/42219 · Telegram Post