Medium severity6.7NVD Advisory· Published Aug 12, 2022· Updated Jun 17, 2026
CVE-2022-28626
CVE-2022-28626
Description
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Affected products
3- HPE/Integrated Lights-Out 5 (iLO 5)description
- Range: <2.71
- cpe:2.3:o:hpe:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*Range: <2.71
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpsc/doc/public/displaynvdVendor Advisory
News mentions
0No linked articles in our index yet.