A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00496.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Hp
  • Integrated Lights-out 4
Hpe
  • Apollo 4200 Gen9 Server
  • Proliant Bl420c Gen8 Server
  • Proliant Bl460c Gen8 Server Blade
  • Proliant Bl460c Gen9 Server Blade
  • Proliant Bl465c Gen8 Server Blade
  • Proliant Bl660c Gen8 Server Blade
  • Proliant Bl660c Gen9 Server
  • Proliant Dl120 Gen9 Server
  • Proliant Dl160 Gen8 Server
  • Proliant Dl160 Gen9 Server
  • Proliant Dl180 Gen9 Server
  • Proliant Dl20 Gen9 Server
  • Proliant Dl320e Gen8 Server
  • Proliant Dl320e Gen8 V2 Server
  • Proliant Dl360 Gen9 Server
  • Proliant Dl360e Gen8 Server
  • Proliant Dl360p Gen8 Server
  • Proliant Dl380 Gen9 Server
  • Proliant Dl380e Gen8 Server
  • Proliant Dl380p Gen8 Server
  • Proliant Dl385p Gen8
  • Proliant Dl560 Gen8 Server
  • Proliant Dl560 Gen9 Server
  • Proliant Dl580 Gen8 Server
  • Proliant Dl580 Gen9 Server
  • Proliant Dl60 Gen9 Server
  • Proliant Dl80 Gen9 Server
  • Proliant Ec200a Server
  • Proliant Microserver Gen8
  • Proliant Ml110 Gen9 Server
  • Proliant Ml150 Gen9 Server
  • Proliant Ml30 Gen9 Server
  • Proliant Ml310e Gen8 Server
  • Proliant Ml310e Gen8 V2 Server
  • Proliant Ml350 Gen9 Server
  • Proliant Ml350e Gen8 V2 Server
  • Proliant Ml350p Gen8 Server
  • Proliant Sl210t Gen8 Server
  • Proliant Sl230s Gen8 Server
  • Proliant Sl250s Gen8 Server
  • Proliant Sl270s Gen8 Se Server
  • Proliant Sl270s Gen8 Server
  • Proliant Sl4540 Gen8 1 Node Server
  • Proliant Ws460c Gen8 Graphics Server Blade
  • Proliant Ws460c Gen9 Graphics Server Blade
  • Proliant Xl170r Gen9 Server
  • Proliant Xl190r Gen9 Server
  • Proliant Xl220a Gen8 V2 Server
  • Proliant Xl230a Gen9 Server
  • Proliant Xl250a Gen9 Server
  • Proliant Xl450 Gen9 Server
  • Proliant Xl730f Gen9 Server
  • Proliant Xl740f Gen9 Server
  • Proliant Xl750f Gen9 Server
  • Synergy 480 Gen9 Compute Module
  • Synergy 620 Gen9 Compute Module
  • Synergy 660 Gen9 Compute Module
  • Synergy 680 Gen9 Compute Module

Configuration 1 [-]

AND
cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hpe:apollo_4200_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl465c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl660c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl20_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl385p_gen8:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl580_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ec200a_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_microserver_gen8:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml150_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl230s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl270s_gen8_se_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl4540_gen8_1_node_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ws460c_gen8_graphics_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ws460c_gen9_graphics_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl220a_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl450_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_480_gen9_compute_module:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_620_gen9_compute_module:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_660_gen9_compute_module:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_680_gen9_compute_module:-:*:*:*:*:*:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-28643 A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04240en_us cve-icon cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2024-08-03T03:51:45.936Z

Reserved: 2022-01-19T00:00:00

Link: CVE-2022-23704

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-05-09T21:15:08.047

Modified: 2024-11-21T06:49:08.550

Link: CVE-2022-23704

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.