Unscored severity · published Jan 21, 2015
CVE-2015-0424
Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 allows remote authenticated users to…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to IPMI.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IL
Integrated Lights Out Manager Firmware · Oracle
through 3.2.3 · source: NVD
Affected product
IL
Integrated Lights Out Manager Firmware
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0424
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0424
Patch
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
www.securityfocus.com
http://www.securityfocus.com/bid/72181
www.securitytracker.com
http://www.securitytracker.com/id/1031594
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/100158
More from Integrated Lights Out Manager Firmware
9.8
CVE-2016-5453
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and…
8.8
CVE-2016-5457
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and…
8.3
CVE-2016-5445
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and…
7.7
CVE-2018-2566
Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application)
7.7
CVE-2016-3481
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect availability via vectors related…