Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-28638 Details

Description

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us	CVE	Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04365en_us	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	CISA-ADP

Affected Products

Product	Versions
hpe integrated lights-out 5 firmware	< 2.72
CPE cpe:2.3:o:hpe:integrated_lights-out_5_firmware:::::::: Remediation No remediation found in references.
hp apollo 4200 gen10 server	All versions
CPE cpe:2.3:h:hp:apollo_4200_gen10_server:-:::::::* Remediation No remediation found in references.
hp apollo 4500	All versions
CPE cpe:2.3:h:hp:apollo_4500:-:::::::* Remediation No remediation found in references.
hp apollo r2000 chassis	All versions
CPE cpe:2.3:h:hp:apollo_r2000_chassis:-:::::::* Remediation No remediation found in references.
hpe apollo 2000 gen10 plus system	All versions
CPE cpe:2.3:h:hpe:apollo_2000_gen10_plus_system:-:::::::* Remediation No remediation found in references.
hpe apollo 4200 gen10 plus system	All versions
CPE cpe:2.3:h:hpe:apollo_4200_gen10_plus_system:-:::::::* Remediation No remediation found in references.
hpe apollo 4510 gen10 system	All versions
CPE cpe:2.3:h:hpe:apollo_4510_gen10_system:-:::::::* Remediation No remediation found in references.
hpe apollo 6500 gen10 plus	All versions
CPE cpe:2.3:h:hpe:apollo_6500_gen10_plus:-:::::::* Remediation No remediation found in references.
hpe apollo n2600 gen10 plus	All versions
CPE cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-:::::::* Remediation No remediation found in references.
hpe apollo n2800 gen10 plus	All versions
CPE cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-:::::::* Remediation No remediation found in references.
hpe apollo r2600 gen10	All versions
CPE cpe:2.3:h:hpe:apollo_r2600_gen10:-:::::::* Remediation No remediation found in references.
hpe apollo r2800 gen10	All versions
CPE cpe:2.3:h:hpe:apollo_r2800_gen10:-:::::::* Remediation No remediation found in references.
hpe edgeline e920 server blade	All versions
CPE cpe:2.3:h:hpe:edgeline_e920_server_blade:-:::::::* Remediation No remediation found in references.
hpe edgeline e920d server blade	All versions
CPE cpe:2.3:h:hpe:edgeline_e920d_server_blade:-:::::::* Remediation No remediation found in references.
hpe edgeline e920t server blade	All versions
CPE cpe:2.3:h:hpe:edgeline_e920t_server_blade:-:::::::* Remediation No remediation found in references.
hpe integrated lights-out 5	All versions
CPE cpe:2.3:h:hpe:integrated_lights-out_5:-:::::::* Remediation No remediation found in references.
hpe proliant bl460c gen10 server blade	All versions
CPE cpe:2.3:h:hpe:proliant_bl460c_gen10_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant dl110 gen10 plus telco server	All versions
CPE cpe:2.3:h:hpe:proliant_dl110_gen10_plus_telco_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl160 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl160_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl180 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl180_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl20 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl20_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl20 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl20_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl325 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl325_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl325 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl325_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl325 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl325_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl345 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl345_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl360 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl360_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl360 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl360_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl365 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl365_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl380 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl380_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl380 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl380_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl385 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dl385_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl385 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl385_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl385 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl385_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl560 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl560_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dl580 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dl580_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx170r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx170r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx190r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx190r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx220n gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx220n_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx325 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx325_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx360 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx360_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx360 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx360_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx380 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx380_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx380 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx380_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx385 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_dx385_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx385 gen10 plus v2 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx385_gen10_plus_v2_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx4200 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx4200_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant dx560 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_dx560_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant e910 server blade	All versions
CPE cpe:2.3:h:hpe:proliant_e910_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant e910t server blade	All versions
CPE cpe:2.3:h:hpe:proliant_e910t_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant m750 server blade	All versions
CPE cpe:2.3:h:hpe:proliant_m750_server_blade:-:::::::* Remediation No remediation found in references.
hpe proliant microserver gen10 plus	All versions
CPE cpe:2.3:h:hpe:proliant_microserver_gen10_plus:-:::::::* Remediation No remediation found in references.
hpe proliant ml110 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_ml110_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant ml30 gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_ml30_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant ml30 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_ml30_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant ml350 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_ml350_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl170r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl170r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl190r gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl190r_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl220n gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl220n_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl225n gen10 plus 1u node	All versions
CPE cpe:2.3:h:hpe:proliant_xl225n_gen10_plus_1u_node:-:::::::* Remediation No remediation found in references.
hpe proliant xl230k gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl230k_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl270d gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl270d_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl290n gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl290n_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl420 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl420_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl450 gen10 server	All versions
CPE cpe:2.3:h:hpe:proliant_xl450_gen10_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl645d gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl645d_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl675d gen10 plus server	All versions
CPE cpe:2.3:h:hpe:proliant_xl675d_gen10_plus_server:-:::::::* Remediation No remediation found in references.
hpe proliant xl925g gen10 plus 1u 4-node configure-to-order server	All versions
CPE cpe:2.3:h:hpe:proliant_xl925g_gen10_plus_1u_4-node_configure-to-order_server:-:::::::* Remediation No remediation found in references.
hpe storage file controller	All versions
CPE cpe:2.3:h:hpe:storage_file_controller:-:::::::* Remediation No remediation found in references.
hpe storage performance file controller	All versions
CPE cpe:2.3:h:hpe:storage_performance_file_controller:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1460 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1460_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1560 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1560_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1660 expanded storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1660_expanded_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1660 performance storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1660_performance_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1660 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1660_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1860 performance storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1860_performance_storage:-:::::::* Remediation No remediation found in references.
hpe storeeasy 1860 storage	All versions
CPE cpe:2.3:h:hpe:storeeasy_1860_storage:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
May 29, 2025	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 23, 2022	Initial Analysis	[email protected]

CVE-2022-28638 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation