Your review has been sent successfully

HPE Alert

2413
Classification
These posts contain security alerts, including digital loopholes, electronic attacks, technical updates, and they are classified base on the level of severity.

Critical

High

Medium

Low

Warning Date

Severity Level

Warning Number

Target Sector

21 August, 2022

● High

2022-5149

All

Description:

HPE has released a security update to address several vulnerabilities in the following products:

  • HPE OneView - Prior to 7.0, and 6.60.01
  • Aruba Virtual Intranet Access (VIA) Windows Client Only - All versions lower than VIA 4.3.0 build 2208101
  • HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers - Prior to 2.71
  • HPE Apollo 2000 Gen10 Plus System - Prior to 2.71
  • HPE Apollo 4200 Gen10 Plus System - Prior to 2.71
  • HPE Apollo 4200 Gen10 Server - Prior to 2.71 - HPE ProLiant XL420 Gen10 Server
  • HPE Apollo 4510 Gen10 System - Prior to 2.71
  • HPE Apollo 6500 Gen10 Plus System - Prior to 2.71
  • HPE Apollo 6500 Gen10 System - Prior to 2.71
  • HPE Apollo n2600 Gen10 Plus - Prior to 2.71
  • HPE Apollo n2800 Gen10 Plus - Prior to 2.71
  • HPE Apollo r2000 Chassis - Prior to 2.71 - HPE Apollo r2800 Gen10 , r2600 Gen10, r2800 Gen10
  • HPE Edgeline e920 Server Blade - Prior to 2.71
  • HPE Edgeline e920d Server Blade - Prior to 2.71
  • HPE Edgeline e920t Server Blade - Prior to 2.71
  • HPE ProLiant DL20 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.71
  • HPE ProLiant DL20 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 2.71
  • HPE ProLiant DL120 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL160 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL180 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL325 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DL325 Gen10 Plus v2 server - Prior to 2.71
  • HPE ProLiant DL325 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL345 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DL360 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DL360 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL365 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DL380 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DL380 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL385 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DL385 Gen10 Plus v2 server - Prior to 2.71
  • HPE ProLiant DL385 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL560 Gen10 Server - Prior to 2.71
  • HPE ProLiant DL580 Gen10 Server - Prior to 2.71
  • HPE ProLiant DX170r Gen10 server - Prior to 2.71
  • HPE ProLiant DX190r Gen10 server - Prior to 2.71
  • HPE ProLiant DX220n Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DX325 Gen10 Plus v2 server - Prior to 2.71
  • HPE ProLiant DX360 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DX360 Gen10 server - Prior to 2.71
  • HPE ProLiant DX380 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DX380 Gen10 server - Prior to 2.71
  • HPE ProLiant DX385 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant DX385 Gen10 Plus v2 server - Prior to 2.71
  • HPE ProLiant DX4200 Gen10 server - Prior to 2.71
  • HPE ProLiant DX560 Gen10 server - Prior to 2.71
  • HPE ProLiant e910 Server Blade - Prior to 2.71
  • HPE ProLiant e910t Server Blade - Prior to 2.71
  • HPE ProLiant m750 Server Blade - Prior to 2.71
  • HPE ProLiant MicroServer Gen10 Plus - Prior to 2.71
  • HPE ProLiant ML30 Gen10 Plus server - Prior to 2.71
  • HPE ProLiant ML30 Gen10 Server - Prior to 2.71
  • HPE ProLiant ML110 Gen10 Server - Prior to 2.71
  • HPE ProLiant ML350 Gen10 Server - Prior to 2.71
  • HPE ProLiant XL170r Gen10 Server - Prior to 2.71
  • HPE ProLiant XL190r Gen10 Server - Prior to 2.71
  • HPE ProLiant XL220n Gen10 Plus Server - Prior to 2.71
  • HPE ProLiant XL225n Gen10 Plus 1U Node - Prior to 2.71
  • HPE ProLiant XL230k Gen10 Server - Prior to 2.71
  • HPE ProLiant XL270d Gen10 Server - Prior to 2.71
  • HPE ProLiant XL290n Gen10 Plus Server - Prior to 2.71
  • HPE ProLiant XL450 Gen10 Server - Prior to 2.71
  • HPE ProLiant XL645d Gen10 Plus Server - Prior to 2.71
  • HPE ProLiant XL675d Gen10 Plus Server - Prior to 2.71
  • HPE ProLiant XL925g Gen10 Plus 1U 4-node Configure-to-order Server - Prior to 2.71
  • HPE Storage File Controller - Prior to 2.71
  • HPE Storage Performance File Controller - Prior to 2.71
  • HPE StoreEasy 1460 Storage - Prior to 2.71
  • HPE StoreEasy 1560 Storage - Prior to 2.71
  • HPE StoreEasy 1660 Expanded Storage - Prior to 2.71
  • HPE StoreEasy 1660 Performance Storage - Prior to 2.71
  • HPE StoreEasy 1660 Storage - Prior to 2.71
  • HPE StoreEasy 1860 Performance Storage - Prior to 2.71
  • HPE StoreEasy 1860 Storage - Prior to 2.71
  • HPE Synergy 480 Gen10 Compute Module - Prior to HPE Synergy Service Pack (SSP) SY-2022.08.01 (9 Aug 2022)
  • HPE Synergy 480 Gen10 Plus Compute Module - Prior to HPE Synergy Service Pack (SSP) SY-2022.08.01 (9 Aug 2022)
  • HPE Synergy 660 Gen10 Compute Module - Prior to HPE Synergy Service Pack (SSP) SY-2022.08.01 (9 Aug 2022)

Threats:

Attacker could exploit these vulnerabilities by doing the following:

  • Sensitive information disclosure
  • Escalation of Privilege

Best practice and Recommendations:

The CERT team encourages users to review HPE security advisory and apply the necessary updates:

Last updated at 21 August, 2022

Rate the content

rate-icon
up icon