CVE-2023-28092
Medium
Published: 01 May 2023
Published
01 May 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.1
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
EPSS Score
0.0015
35.4th percentile
Risk Priority
12
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-28092 is a medium-severity an unspecified weakness vulnerability in Hp Integrated Lights-Out Firmware. Its CVSS base score is 6.1 (Medium).
Operationally, ranked at the 35.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-31817
Vulnerability details
A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
hp
integrated lights-out firmware
1.05
hp
proliant rl300 firmware
1.12
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.