Hpe Integrated Lights Out 6 Ilo 6
Monthly
Denial of service in HPE Integrated Lights-Out 6 (iLO 6) firmware prior to v1.78 allows an unauthenticated attacker on an adjacent network segment to render the management interface unavailable. The impact is limited to availability (A:H) with no confidentiality or integrity compromise, but disrupting iLO can blind administrators to server state and block out-of-band recovery operations during incidents. No public exploit or active exploitation has been identified at time of analysis; HPE has released v1.78 as the fix.
Denial of service in HPE Integrated Lights-Out 6 (iLO 6) firmware prior to v1.78 allows an unauthenticated attacker on an adjacent network segment to render the management interface unavailable. The impact is limited to availability (A:H) with no confidentiality or integrity compromise, but disrupting iLO can blind administrators to server state and block out-of-band recovery operations during incidents. No public exploit or active exploitation has been identified at time of analysis; HPE has released v1.78 as the fix.