Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-28633 Details

Description

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file system resulting in a complete loss of confidentiality and a partial loss of integrity and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.3 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us	CVE	Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_us	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
hpe integrated lights-out 5 firmware	< 2.71
CPE cpe:2.3:o:hpe:integrated_lights-out_5_firmware:::::::: Remediation No remediation found in references.
hpe apollo 2000 gen10 plus system	All versions
CPE cpe:2.3:h:hpe:apollo_2000_gen10_plus_system:-:::::::* Remediation No remediation found in references.
hpe apollo 4200 gen10 server	All versions
CPE cpe:2.3:h:hpe:apollo_4200_gen10_server:-:::::::* Remediation No remediation found in references.
hpe apollo 4510 gen10 system	All versions
CPE cpe:2.3:h:hpe:apollo_4510_gen10_system:-:::::::* Remediation No remediation found in references.
hpe apollo 6500 gen10 plus system	All versions
CPE cpe:2.3:h:hpe:apollo_6500_gen10_plus_system:-:::::::* Remediation No remediation found in references.
hpe apollo 6500 gen10 system	All versions
CPE cpe:2.3:h:hpe:apollo_6500_gen10_system:-:::::::* Remediation No remediation found in references.
hpe apollo n2600 gen10 plus	All versions
CPE cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-:::::::* Remediation No remediation found in references.
hpe apollo n2800 gen10 plus	All versions
CPE cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-:::::::* Remediation No remediation found in references.
hpe apollo r2600 gen10	All versions
CPE cpe:2.3:h:hpe:apollo_r2600_gen10:-:::::::* Remediation No remediation found in references.
hpe apollo r2800 gen10	All versions
CPE cpe:2.3:h:hpe:apollo_r2800_gen10:-:::::::* Remediation No remediation found in references.
hpe edgeline e920 server blade	All versions
CPE cpe:2.3:h:hpe:edgeline_e920_server_blade:-:::::::* Remediation No remediation found in references.
hpe edgeline e920d server blade	All versions
CPE cpe:2.3:h:hpe:edgeline_e920d_server_blade:-:::::::* Remediation No remediation found in references.
hpe edgeline e920t server blade	All versions
CPE cpe:2.3:h:hpe:edgeline_e920t_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant bl460c gen10 server blade	All versions
CPE cpe:2.3:h:hpe:proliant_bl460c_gen10_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant dl110 gen10 plus telco server	All versions
CPE cpe:2.3:h:hpe:proliant_dl110_gen10_plus_telco_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl120 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl120_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl160 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl160_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl180 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl180_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl20 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl20_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl20 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl20_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl325 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl325_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl325 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl325_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl325 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl325_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl345 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl345_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl360 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl360_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl360 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl360_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl365 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl365_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl380 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl380_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl380 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl380_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl385 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl385_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl385 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl385_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl385 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl385_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl560 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl560_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl580 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl580_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx170r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx170r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx190r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx190r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx220n gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx220n_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx325 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx325_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx360 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx360_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx360 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx360_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx380 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx380_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx380 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx380_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx385 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx385_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx385 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx385_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx4200 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx4200_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx560 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx560_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant e910 server blade	All versions
CPE cpe:2.3:h:hpe:proliant_e910_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant e910t server blade	All versions
CPE cpe:2.3:h:hpe:proliant_e910t_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant m750 server blade	All versions
CPE cpe:2.3:h:hpe:proliant_m750_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant microserver gen10 plus	All versions
CPE cpe:2.3:h:hpe:proliant_microserver_gen10_plus:-:::::::* Remediation No remediation found in references.
hpe proliant ml110 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_ml110_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant ml30 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_ml30_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant ml30 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_ml30_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant ml350 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_ml350_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl170r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl170r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl190r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl190r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl220n gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl220n_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl225n gen10 plus 1u node	All versions
CPE cpe:2.3:h:hpe:proliant_xl225n_gen10_plus_1u_node:-:::::::* Remediation No remediation found in references.
hpe proliant xl230k gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl230k_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl270d gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl270d_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl290n gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl290n_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl420 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl420_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl450 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl450_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl645d gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl645d_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl675d gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl675d_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl925g gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl925g_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe storage file controller	All versions
CPE cpe:2.3:h:hpe:storage_file_controller:-:::::::* Remediation No remediation found in references.
hpe storage performance file controller	All versions
CPE cpe:2.3:h:hpe:storage_performance_file_controller:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1460 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1460_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1560 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1560_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1660 expanded storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1660_expanded_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1660 performance storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1660_performance_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1660 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1660_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1860 performance storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1860_performance_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1860 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1860_storage:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 16, 2022	Initial Analysis	[email protected]

CVE-2022-28633 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation