CVE-2023-50272 - OpenCVE

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulnerability could be remotely exploited to allow authentication bypass.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Hpe	Integrated Lights-out 5 Firmware Integrated Lights-out 6 Integrated Lights-out 6 Firmware Integrated Lights-out 5

Configuration 1 [-]

AND

cpe:2.3:o:hpe:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hpe:integrated_lights-out_5:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:hpe:integrated_lights-out_6_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:hpe:integrated_lights-out_6:-:*:*:*:*:*:*:*

References

Link	Resource
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04584en_us	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: hpe

Published: 2023-12-19T15:42:21.932Z

Updated: 2023-12-19T15:42:39.708Z

Reserved: 2023-12-06T14:22:26.839Z

Link: CVE-2023-50272

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-12-19T16:15:12.347

Modified: 2023-12-28T19:57:59.780

Link: CVE-2023-50272

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hpe:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D366AC7D-C62F-4DDB-B886-E3DCC50327BF", "versionEndIncluding": "3.00", "versionStartIncluding": "2.63", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hpe:integrated_lights-out_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "2D5370AF-C0B8-4E75-8B01-A4239B130E9E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hpe:integrated_lights-out_6_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C79D62CF-A70F-4B0F-B7F6-1983F96B9034", "versionEndIncluding": "1.55", "versionStartIncluding": "1.05", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hpe:integrated_lights-out_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "413204EF-0012-471B-A577-4E778B589541", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulnerability could be remotely exploited to allow authentication bypass."}, {"lang": "es", "value": "Se ha identificado una posible vulnerabilidad de seguridad en HPE Integrated Lights-Out 5 (iLO 5) y Integrated Lights-Out 6 (iLO 6). La vulnerabilidad podr\u00eda explotarse de forma remota para permitir eludir la autenticaci\u00f3n."}], "id": "CVE-2023-50272", "lastModified": "2023-12-28T19:57:59.780", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 4.7, "source": "security-alert@hpe.com", "type": "Secondary"}]}, "published": "2023-12-19T16:15:12.347", "references": [{"source": "security-alert@hpe.com", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04584en_us"}], "sourceIdentifier": "security-alert@hpe.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}