CVE-2022-28636

A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. A successful attack depends on conditions beyond the attackers control. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_usVendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04333en_usVendor Advisory

Published

Aug 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28630A local arbitrary code execution vulnerability was discovere…7.3
• CVE-2022-28631A potential arbitrary code execution and a denial of service…8.8
• CVE-2022-28632A potential arbitrary code execution and a denial of service…8.8
• CVE-2022-28633A local disclosure of sensitive information and a local unau…7.3
• CVE-2022-28634A local arbitrary code execution vulnerability was discovere…6.7
• CVE-2022-28635A potential local arbitrary code execution and a local denia…7.4
• CVE-2022-28637A local Denial of Service (DoS) and local arbitrary code exe…7.8
• CVE-2022-28638An isolated local disclosure of information and potential is…7.8
• CVE-2022-28639A remote potential adjacent denial of service (DoS) and pote…8.8
• CVE-2022-2864The demon image annotation plugin for WordPress is vulnerabl…8.8
• CVE-2022-28640A potential local adjacent arbitrary code execution vulnerab…8.8
• CVE-2022-28641This vulnerability allows remote attackers to execute arbitr…7.8