CVE-2022-28626

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-286278.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286288.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286297.8A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A lCVE-2022-28634.9The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the contentCVE-2022-286307.3A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286318.8A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE IntegrateCVE-2022-286328.8A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE IntegrateCVE-2022-286337.3A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated LightCVE-2022-286346.7A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A hCVE-2022-286357.4A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HCVE-2022-286367.4A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HCVE-2022-286377.8A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, i
CVE-2022-28626: Medium severity, CVSS 6.7 | Vulnix