CVE-2018-7113

A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates.

Score

CVSS 3.0 6.6 Medium

Status

Modified - security-alert@hpe.com

Published

2018-12-03

Last modified

2024-08-05

Affected products

• Hpe Integrated Lights-out 5 Ilo 5 For Hpe Gen10 Servers (Hewlett Packard Enterprise)
• Integrated Lights-out 5 Firmware (Hp)

References

• http://www.securitytracker.com/id/1042010
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03894en_us