A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00496.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a HPE Integrated Lights-Out 4 (iLO 4) affected
Version Status Constraints
Prior to iLO 4 version 2.80 affected —

Configuration 1 [-]

AND
cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hpe:apollo_4200_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl465c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl660c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl20_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl385p_gen8:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl580_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ec200a_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_microserver_gen8:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml150_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl230s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl270s_gen8_se_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_sl4540_gen8_1_node_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ws460c_gen8_graphics_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_ws460c_gen9_graphics_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl220a_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl450_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_480_gen9_compute_module:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_620_gen9_compute_module:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_660_gen9_compute_module:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:synergy_680_gen9_compute_module:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Hp Subscribe
Integrated Lights-out 4 Subscribe
Hpe Subscribe
Apollo 4200 Gen9 Server Subscribe
Proliant Bl420c Gen8 Server Subscribe
Proliant Bl460c Gen8 Server Blade Subscribe
Proliant Bl460c Gen9 Server Blade Subscribe
Proliant Bl465c Gen8 Server Blade Subscribe
Proliant Bl660c Gen8 Server Blade Subscribe
Proliant Bl660c Gen9 Server Subscribe
Proliant Dl120 Gen9 Server Subscribe
Proliant Dl160 Gen8 Server Subscribe
Proliant Dl160 Gen9 Server Subscribe
Proliant Dl180 Gen9 Server Subscribe
Proliant Dl20 Gen9 Server Subscribe
Proliant Dl320e Gen8 Server Subscribe
Proliant Dl320e Gen8 V2 Server Subscribe
Proliant Dl360 Gen9 Server Subscribe
Proliant Dl360e Gen8 Server Subscribe
Proliant Dl360p Gen8 Server Subscribe
Proliant Dl380 Gen9 Server Subscribe
Proliant Dl380e Gen8 Server Subscribe
Proliant Dl380p Gen8 Server Subscribe
Proliant Dl385p Gen8 Subscribe
Proliant Dl560 Gen8 Server Subscribe
Proliant Dl560 Gen9 Server Subscribe
Proliant Dl580 Gen8 Server Subscribe
Proliant Dl580 Gen9 Server Subscribe
Proliant Dl60 Gen9 Server Subscribe
Proliant Dl80 Gen9 Server Subscribe
Proliant Ec200a Server Subscribe
Proliant Microserver Gen8 Subscribe
Proliant Ml110 Gen9 Server Subscribe
Proliant Ml150 Gen9 Server Subscribe
Proliant Ml30 Gen9 Server Subscribe
Proliant Ml310e Gen8 Server Subscribe
Proliant Ml310e Gen8 V2 Server Subscribe
Proliant Ml350 Gen9 Server Subscribe
Proliant Ml350e Gen8 V2 Server Subscribe
Proliant Ml350p Gen8 Server Subscribe
Proliant Sl210t Gen8 Server Subscribe
Proliant Sl230s Gen8 Server Subscribe
Proliant Sl250s Gen8 Server Subscribe
Proliant Sl270s Gen8 Se Server Subscribe
Proliant Sl270s Gen8 Server Subscribe
Proliant Sl4540 Gen8 1 Node Server Subscribe
Proliant Ws460c Gen8 Graphics Server Blade Subscribe
Proliant Ws460c Gen9 Graphics Server Blade Subscribe
Proliant Xl170r Gen9 Server Subscribe
Proliant Xl190r Gen9 Server Subscribe
Proliant Xl220a Gen8 V2 Server Subscribe
Proliant Xl230a Gen9 Server Subscribe
Proliant Xl250a Gen9 Server Subscribe
Proliant Xl450 Gen9 Server Subscribe
Proliant Xl730f Gen9 Server Subscribe
Proliant Xl740f Gen9 Server Subscribe
Proliant Xl750f Gen9 Server Subscribe
Synergy 480 Gen9 Compute Module Subscribe
Synergy 620 Gen9 Compute Module Subscribe
Synergy 660 Gen9 Compute Module Subscribe
Synergy 680 Gen9 Compute Module Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-28643 A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04240en_us cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2024-08-03T03:51:45.936Z

Reserved: 2022-01-19T00:00:00

Link: CVE-2022-23704

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-05-09T21:15:08.047

Modified: 2024-11-21T06:49:08.550

Link: CVE-2022-23704

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses