CVE-2018-7101 — HIGH (7.5) — White Hats Nepal

Q: What is CVE-2018-7101?

CVE-2018-7101 is a vulnerability with a CVSS score of 7.5 (HIGH). A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.

Q: How severe is CVE-2018-7101?

CVE-2018-7101 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2018-7101?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Integrated Lights-Out 4 Firmware, Hp Integrated Lights-Out, Hp Integrated Lights-Out 5 Firmware, Hp Proliant Bl460C Gen10 Server, Hp Proliant Dl120 Gen10 Server.

Vulnerability Description

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Hp	Integrated Lights-Out 4 Firmware	< 2.60
Hp	Integrated Lights-Out	-
Hp	Integrated Lights-Out 5 Firmware	< 1.30
Hp	Proliant Bl460C Gen10 Server	-
Hp	Proliant Dl120 Gen10 Server	-
Hp	Proliant Dl160 Gen10 Server	-
Hp	Proliant Dl180 Gen10 Server	-
Hp	Proliant Dl360 Gen10 Server	-
Hp	Proliant Dl380 Gen10 Server	-
Hp	Proliant Dl385 Gen10 Server	-
Hp	Proliant Dl560 Gen10 Server	-
Hp	Proliant Dl580 Gen10 Server	-
Hp	Proliant Ml110 Gen10 Server	-
Hp	Proliant Ml350 Gen10 Server	-
Hp	Proliant Xl170R Gen10 Server	-
Hp	Proliant Xl190R Gen10 Server	-
Hp	Proliant Xl230K Gen10 Server	-

References

http://www.securitytracker.com/id/1041488Third Party AdvisoryVDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpeVendor Advisory
http://www.securitytracker.com/id/1041488Third Party AdvisoryVDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpeVendor Advisory

FAQ

What is CVE-2018-7101?

CVE-2018-7101 is a vulnerability with a CVSS score of 7.5 (HIGH). A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.

How severe is CVE-2018-7101?

CVE-2018-7101 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7101?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Integrated Lights-Out 4 Firmware, Hp Integrated Lights-Out, Hp Integrated Lights-Out 5 Firmware, Hp Proliant Bl460C Gen10 Server, Hp Proliant Dl120 Gen10 Server.