integrated_lights-out_2_firmware 漏洞

CVE编号

CVE-2018-7112

利用情况

暂无

补丁情况

N/A

披露时间

2018-12-04
漏洞描述
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.
解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us
参考链接
http://www.securitytracker.com/id/1041984
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-...
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-...
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-...
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 hp integrated_lights-out_2_firmware * Up to
(excluding)
2.33
运行在以下环境
系统 hp integrated_lights-out_3_firmware * Up to
(excluding)
1.90
运行在以下环境
系统 hp integrated_lights-out_4_firmware * Up to
(excluding)
2.60
运行在以下环境
系统 hp proliant_bl280c_g6_server_bladefirmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl2x220c_g6_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl2x220c_g7_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl420c_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_bl460c_g6_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl460c_g7_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl460c_gen8_server_blade_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_bl460c_gen9_server_blade_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_bl465c_g7_server_blade_firmware * Up to
(excluding)
2018.03.14
运行在以下环境
系统 hp proliant_bl465c_gen8_(amd)_firmware * Up to
(excluding)
2018.03.14
运行在以下环境
系统 hp proliant_bl490c_g6_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl490c_g7_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl620c_g7_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl660c_gen8_server_blade_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_bl660c_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_bl680c_g7_server_blade_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_bl685c_g7_server_blade_(amd)_firmware * Up to
(excluding)
2018.03.14
运行在以下环境
系统 hp proliant_dl120_g6_server_firmware * -
运行在以下环境
系统 hp proliant_dl120_g7_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_dl120_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl160_g6_server_firmware * -
运行在以下环境
系统 hp proliant_dl160_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl160_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl170e_g6_server_firmware * -
运行在以下环境
系统 hp proliant_dl170h_g6_server_firmware * -
运行在以下环境
系统 hp proliant_dl180_g6_server_firmware * -
运行在以下环境
系统 hp proliant_dl180_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl20_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl320e_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl320e_gen8_v2_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl320_g6_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_dl360e_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl360p_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl360_g6_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_dl360_g7_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_dl360_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl370_g6_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_dl380e_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl380p_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl380_g6_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_dl380_g7_server_firmware - -
运行在以下环境
系统 hp proliant_dl380_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl385p_gen8_(amd)_firmware * Up to
(excluding)
2018.03.14
运行在以下环境
系统 hp proliant_dl385_g7_server_firmware * Up to
(excluding)
2018.03.14
运行在以下环境
系统 hp proliant_dl560_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_dl560_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl580_g7_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_dl580_gen8_server_firmware * Up to
(excluding)
2.00_02-22-2018
运行在以下环境
系统 hp proliant_dl585_g7_server_(amd)_firmware * Up to
(excluding)
2018.03.14
运行在以下环境
系统 hp proliant_dl60_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl80_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_dl980_g7_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_m300_server_cartridge_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_m350_server_cartridge_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_m510_server_cartridge_firmware * Up to
(excluding)
1.64_01-22-2018
运行在以下环境
系统 hp proliant_m710p_server_cartridge_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_m710x_server_cartridge_firmware * Up to
(excluding)
1.64_01-22-2018
运行在以下环境
系统 hp proliant_m710_server_cartridge_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_microserver_gen8_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml10_gen9_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml10_v2_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml110_g6_server_firmware * -
运行在以下环境
系统 hp proliant_ml110_g7_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_ml110_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_ml150_g6_server_firmware * -
运行在以下环境
系统 hp proliant_ml150_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_ml30_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_ml310e_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml310e_gen8_v2_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml330_g6_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_ml350e_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml350e_gen8_v2_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml350p_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_ml350_g6_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_ml350_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_ml370_g6_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_sl160s_g6_server_firmware * -
运行在以下环境
系统 hp proliant_sl170z_g6_server_firmware * -
运行在以下环境
系统 hp proliant_sl210t_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_sl250s_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_sl270s_gen8_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_sl2x170z_g6_server_firmware * -
运行在以下环境
系统 hp proliant_sl390s_g7_server_firmware * Up to
(excluding)
2018.05.21
运行在以下环境
系统 hp proliant_sl4540_gen8_1_node_server_firmware * Up to
(excluding)
2018.01.22
运行在以下环境
系统 hp proliant_sl4545_g7_server_(amd)_firmware 2018.03.14(a) -
运行在以下环境
系统 hp proliant_thin_micro_tm200_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_ws460c_gen9_workstation_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl170r_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl190r_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl230a_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl250a_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl260a_gen9_server_firmware * Up to
(excluding)
1.60_01-22-2018
运行在以下环境
系统 hp proliant_xl270d_gen9_accelerator_tray_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl270d_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl450_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl730f_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl740f_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
系统 hp proliant_xl750f_gen9_server_firmware * Up to
(excluding)
2.56_01-22-2018
运行在以下环境
硬件 hp integrated_lights-out - -
运行在以下环境
硬件 hp integrated_lights-out_2 - -
运行在以下环境
硬件 hp proliant_bl280c_g6_server - -
运行在以下环境
硬件 hp proliant_bl2x220c_g6_server_blade - -
运行在以下环境
硬件 hp proliant_bl2x220c_g7_server_blade - -
运行在以下环境
硬件 hp proliant_bl420c_gen8_server - -
运行在以下环境
硬件 hp proliant_bl460c_g6_server_blade - -
运行在以下环境
硬件 hp proliant_bl460c_g7_server_blade - -
运行在以下环境
硬件 hp proliant_bl460c_gen8_server_blade - -
运行在以下环境
硬件 hp proliant_bl460c_gen9_server_blade - -
运行在以下环境
硬件 hp proliant_bl465c_g7_server_blade - -
运行在以下环境
硬件 hp proliant_bl465c_gen8_(amd) - -
运行在以下环境
硬件 hp proliant_bl490c_g6_server_blade - -
运行在以下环境
硬件 hp proliant_bl490c_g7_server_blade - -
运行在以下环境
硬件 hp proliant_bl620c_g7_server_blade - -
运行在以下环境
硬件 hp proliant_bl660c_gen8_server - -
运行在以下环境
硬件 hp proliant_bl660c_gen9_server - -
运行在以下环境
硬件 hp proliant_bl680c_g7_server_blade - -
运行在以下环境
硬件 hp proliant_bl685c_g7_server_blade_(amd) - -
运行在以下环境
硬件 hp proliant_dl120_g6_server - -
运行在以下环境
硬件 hp proliant_dl120_g7_server - -
运行在以下环境
硬件 hp proliant_dl120_gen9_server - -
运行在以下环境
硬件 hp proliant_dl160_g6_server - -
运行在以下环境
硬件 hp proliant_dl160_gen8_server - -
运行在以下环境
硬件 hp proliant_dl160_gen9_server - -
运行在以下环境
硬件 hp proliant_dl170e_g6_server - -
运行在以下环境
硬件 hp proliant_dl170h_g6_server - -
运行在以下环境
硬件 hp proliant_dl180_g6_server - -
运行在以下环境
硬件 hp proliant_dl180_gen9_server - -
运行在以下环境
硬件 hp proliant_dl20_gen9_server - -
运行在以下环境
硬件 hp proliant_dl320e_gen8_server - -
运行在以下环境
硬件 hp proliant_dl320e_gen8_v2_server - -
运行在以下环境
硬件 hp proliant_dl320_g6_server - -
运行在以下环境
硬件 hp proliant_dl360e_gen8_server - -
运行在以下环境
硬件 hp proliant_dl360p_gen8_server - -
运行在以下环境
硬件 hp proliant_dl360_g6_server - -
运行在以下环境
硬件 hp proliant_dl360_g7_server - -
运行在以下环境
硬件 hp proliant_dl360_gen9_server - -
运行在以下环境
硬件 hp proliant_dl370_g6_server - -
运行在以下环境
硬件 hp proliant_dl380e_gen8_server - -
运行在以下环境
硬件 hp proliant_dl380p_gen8_server - -
运行在以下环境
硬件 hp proliant_dl380_g6_server - -
运行在以下环境
硬件 hp proliant_dl380_g7_server - -
运行在以下环境
硬件 hp proliant_dl380_gen9_server - -
运行在以下环境
硬件 hp proliant_dl385p_gen8_(amd) - -
运行在以下环境
硬件 hp proliant_dl385_g7_server - -
运行在以下环境
硬件 hp proliant_dl560_gen8_server - -
运行在以下环境
硬件 hp proliant_dl560_gen9_server - -
运行在以下环境
硬件 hp proliant_dl580_g7_server - -
运行在以下环境
硬件 hp proliant_dl580_gen8_server - -
运行在以下环境
硬件 hp proliant_dl585_g7_server_(amd) - -
运行在以下环境
硬件 hp proliant_dl60_gen9_server - -
运行在以下环境
硬件 hp proliant_dl80_gen9_server - -
运行在以下环境
硬件 hp proliant_dl980_g7_server - -
运行在以下环境
硬件 hp proliant_gen6_server - -
运行在以下环境
硬件 hp proliant_gen7_server - -
运行在以下环境
硬件 hp proliant_gen8_server - -
运行在以下环境
硬件 hp proliant_m300_server_cartridge - -
运行在以下环境
硬件 hp proliant_m350_server_cartridge - -
运行在以下环境
硬件 hp proliant_m510_server_cartridge - -
运行在以下环境
硬件 hp proliant_m710p_server_cartridge - -
运行在以下环境
硬件 hp proliant_m710x_server_cartridge - -
运行在以下环境
硬件 hp proliant_m710_server_cartridge - -
运行在以下环境
硬件 hp proliant_microserver_gen8 - -
运行在以下环境
硬件 hp proliant_ml10_gen9_server - -
运行在以下环境
硬件 hp proliant_ml10_v2_server - -
运行在以下环境
硬件 hp proliant_ml110_g6_server - -
运行在以下环境
硬件 hp proliant_ml110_g7_server - -
运行在以下环境
硬件 hp proliant_ml110_gen9_server - -
运行在以下环境
硬件 hp proliant_ml150_g6_server - -
运行在以下环境
硬件 hp proliant_ml150_gen9_server - -
运行在以下环境
硬件 hp proliant_ml30_gen9_server - -
运行在以下环境
硬件 hp proliant_ml310e_gen8_server - -
运行在以下环境
硬件 hp proliant_ml310e_gen8_v2_server - -
运行在以下环境
硬件 hp proliant_ml330_g6_server - -
运行在以下环境
硬件 hp proliant_ml350e_gen8_server - -
运行在以下环境
硬件 hp proliant_ml350e_gen8_v2_server - -
运行在以下环境
硬件 hp proliant_ml350p_gen8_server - -
运行在以下环境
硬件 hp proliant_ml350_g6_server - -
运行在以下环境
硬件 hp proliant_ml350_gen9_server - -
运行在以下环境
硬件 hp proliant_ml370_g6_server - -
运行在以下环境
硬件 hp proliant_sl160s_g6_server - -
运行在以下环境
硬件 hp proliant_sl170z_g6_server - -
运行在以下环境
硬件 hp proliant_sl210t_gen8_server - -
运行在以下环境
硬件 hp proliant_sl250s_gen8_server - -
运行在以下环境
硬件 hp proliant_sl270s_gen8_server - -
运行在以下环境
硬件 hp proliant_sl2x170z_g6_server - -
运行在以下环境
硬件 hp proliant_sl390s_g7_server - -
运行在以下环境
硬件 hp proliant_sl4540_gen8_1_node_server - -
运行在以下环境
硬件 hp proliant_sl4545_g7_server_(amd) - -
运行在以下环境
硬件 hp proliant_thin_micro_tm200_server - -
运行在以下环境
硬件 hp proliant_ws460c_gen9_workstation - -
运行在以下环境
硬件 hp proliant_xl170r_gen9_server - -
运行在以下环境
硬件 hp proliant_xl190r_gen9_server - -
运行在以下环境
硬件 hp proliant_xl230a_gen9_server - -
运行在以下环境
硬件 hp proliant_xl250a_gen9_server - -
运行在以下环境
硬件 hp proliant_xl260a_gen9_server - -
运行在以下环境
硬件 hp proliant_xl270d_gen9_accelerator_tray - -
运行在以下环境
硬件 hp proliant_xl270d_gen9_server - -
运行在以下环境
硬件 hp proliant_xl450_gen9_server - -
运行在以下环境
硬件 hp proliant_xl730f_gen9_server - -
运行在以下环境
硬件 hp proliant_xl740f_gen9_server - -
运行在以下环境
硬件 hp proliant_xl750f_gen9_server - -
CVSS3评分
5.5
  • 攻击路径
    本地
  • 攻击复杂度
    低
  • 权限要求
    低
  • 影响范围
    未更改
  • 用户交互
    无
  • 可用性
    无
  • 保密性
    高
  • 完整性
    无
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-ID 漏洞类型
NVD-CWE-noinfo
阿里云安全产品覆盖情况