CVE-2022-23704

HIGH
7.5
CVSS Score
Published: May 9, 2022 at 08:17 PM UTC
Updated: June 17, 2026 at 04:30 AM UTC
1 product affected across 1 vendorIntegrated Lights Out 4· also runs on 58 platforms

Using HPE Integrated Lights-Out 4 (iLO 4) by N/A?

Get instant alerts when new vulnerabilities affect HPE Integrated Lights-Out 4 (iLO 4) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 2%

Description

A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Affected range stops below 2.80, so it looks safe — our inference, not a vendor statement
hpe-apollo-4200-gen9-server (environment) · hpe-proliant-bl420c-gen8-server (environment) · hpe-proliant-bl460c-gen8-server-blade (environment) · hpe-proliant-bl460c-gen9-server-blade (environment) · hpe-proliant-bl465c-gen8-server-blade (environment) · hpe-proliant-bl660c-gen8-server-blade (environment) · hpe-proliant-bl660c-gen9-server (environment) · hpe-proliant-dl120-gen9-server (environment) · hpe-proliant-dl160-gen8-server (environment) · hpe-proliant-dl160-gen9-server (environment) · hpe-proliant-dl180-gen9-server (environment) · hpe-proliant-dl20-gen9-server (environment) · hpe-proliant-dl320e-gen8-server (environment) · hpe-proliant-dl320e-gen8-v2-server (environment) · hpe-proliant-dl360-gen9-server (environment) · hpe-proliant-dl360e-gen8-server (environment) · hpe-proliant-dl360p-gen8-server (environment) · hpe-proliant-dl380-gen9-server (environment) · hpe-proliant-dl380e-gen8-server (environment) · hpe-proliant-dl380p-gen8-server (environment) · hpe-proliant-dl385p-gen8 (environment) · hpe-proliant-dl560-gen8-server (environment) · hpe-proliant-dl560-gen9-server (environment) · hpe-proliant-dl580-gen8-server (environment) · hpe-proliant-dl580-gen9-server (environment) · hpe-proliant-dl60-gen9-server (environment) · hpe-proliant-dl80-gen9-server (environment) · hpe-proliant-ec200a-server (environment) · hpe-proliant-microserver-gen8 (environment) · hpe-proliant-ml110-gen9-server (environment) · hpe-proliant-ml150-gen9-server (environment) · hpe-proliant-ml30-gen9-server (environment) · hpe-proliant-ml310e-gen8-server (environment) · hpe-proliant-ml310e-gen8-v2-server (environment) · hpe-proliant-ml350-gen9-server (environment) · hpe-proliant-ml350e-gen8-v2-server (environment) · hpe-proliant-ml350p-gen8-server (environment) · hpe-proliant-sl210t-gen8-server (environment) · hpe-proliant-sl230s-gen8-server (environment) · hpe-proliant-sl250s-gen8-server (environment) · hpe-proliant-sl270s-gen8-se-server (environment) · hpe-proliant-sl270s-gen8-server (environment) · hpe-proliant-sl4540-gen8-1-node-server (environment) · hpe-proliant-ws460c-gen8-graphics-server-blade (environment) · hpe-proliant-ws460c-gen9-graphics-server-blade (environment) · hpe-proliant-xl170r-gen9-server (environment) · hpe-proliant-xl190r-gen9-server (environment) · hpe-proliant-xl220a-gen8-v2-server (environment) · hpe-proliant-xl230a-gen9-server (environment) · hpe-proliant-xl250a-gen9-server (environment) · hpe-proliant-xl450-gen9-server (environment) · hpe-proliant-xl730f-gen9-server (environment) · hpe-proliant-xl740f-gen9-server (environment) · hpe-proliant-xl750f-gen9-server (environment) · hpe-synergy-480-gen9-compute-module (environment) · hpe-synergy-620-gen9-compute-module (environment) · hpe-synergy-660-gen9-compute-module (environment) · hpe-synergy-680-gen9-compute-module (environment)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card