Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through…
Priority MEDIUM 43CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors.
Why it matters now
EPSS 0.01973 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 38
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:integrated_lights-out_manager:*:*:*:*:*:*:*:* | all versions | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_6000_modular_system_with_chassis:*:*:*:*:*:*:*:* | up to 2.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_6048_modular_system_with_chassis:*:*:*:*:*:*:*:* | up to 2.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_8000_modular_system:*:*:*:*:*:*:*:* | up to 2.1.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_8000p_modular_system:*:*:*:*:*:*:*:* | up to 2.1.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_t6320_server_module:*:*:*:*:*:*:*:* | up to 7.1.6 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_x6220_with_server_module_software:*:*:*:*:*:*:*:* | up to 2.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_x6250_with_server_module_software:*:*:*:*:*:*:*:* | up to 2.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_x6450_with_server_module_software:*:*:*:*:*:*:*:* | up to 2.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_x8400:*:*:*:*:*:*:*:* | up to 2.0.2 | Vulnerable | Sun |
- cpe:2.3:a:sun:integrated_lights-out_manager:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Sun
- cpe:2.3:h:sun:blade_6000_modular_system_with_chassis:*:*:*:*:*:*:*:* Versions up to 2.0 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_6048_modular_system_with_chassis:*:*:*:*:*:*:*:* Versions up to 2.0 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_8000_modular_system:*:*:*:*:*:*:*:* Versions up to 2.1.1 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_8000p_modular_system:*:*:*:*:*:*:*:* Versions up to 2.1.1 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_t6320_server_module:*:*:*:*:*:*:*:* Versions up to 7.1.6 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_x6220_with_server_module_software:*:*:*:*:*:*:*:* Versions up to 2.0 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_x6250_with_server_module_software:*:*:*:*:*:*:*:* Versions up to 2.0 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_x6450_with_server_module_software:*:*:*:*:*:*:*:* Versions up to 2.0 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_x8400:*:*:*:*:*:*:*:* Versions up to 2.0.2 Vulnerable ·Sun
Show 28 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:sun:blade_x8420:*:*:*:*:*:*:*:* | up to 2.0.2 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_x8440:*:*:*:*:*:*:*:* | up to 2.0.2 | Vulnerable | Sun |
| cpe:2.3:h:sun:blade_x8450:*:*:*:*:*:*:*:* | up to 2.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x2250_server:*:*:*:*:*:*:*:* | up to sw_1.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4100_server:*:*:*:*:*:*:*:* | up to sw_1.5.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4100m2_server:*:*:*:*:*:*:*:* | up to sw_2.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4140_server:*:*:*:*:*:*:*:* | up to sw_2.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4150_server:*:*:*:*:*:*:*:* | up to sw_2.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4200_server:*:*:*:*:*:*:*:* | up to sw_1.5.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4200m2_server:*:*:*:*:*:*:*:* | up to sw_2.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4240_server:*:*:*:*:*:*:*:* | up to sw_2.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4250_server:*:*:*:*:*:*:*:* | up to sw_1.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4440_server:*:*:*:*:*:*:*:* | up to sw_2.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4450_server:*:*:*:*:*:*:*:* | up to sw_2.1.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4500_server:*:*:*:*:*:*:*:* | up to sw_1.5 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4540_server:*:*:*:*:*:*:*:* | up to sw_1.0 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4600_server:*:*:*:*:*:*:*:* | up to sw_1.4 | Vulnerable | Sun |
| cpe:2.3:h:sun:fire_x4600m2_server:*:*:*:*:*:*:*:* | up to sw_2.1.2 | Vulnerable | Sun |
| cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:* | up to cp3260_atca_blade_server; up to t5220_server | Vulnerable | Sun |
| cpe:2.3:h:sun:netra:*:7.1.4a:*:*:*:*:*:* | up to t5440_server | Vulnerable | Sun |
| cpe:2.3:h:sun:netra_x4200m2_server:*:*:*:*:*:*:*:* | up to sw_2.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:netra_x4250_server:*:*:*:*:*:*:*:* | up to sw_1.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:netra_x4450:*:*:*:*:*:*:*:* | up to sw_1.1 | Vulnerable | Sun |
| cpe:2.3:h:sun:sparc_enterprise_server_t5120:*:*:*:*:*:*:*:* | up to 7.1.6 | Vulnerable | Sun |
| cpe:2.3:h:sun:sparc_enterprise_server_t5140:*:*:*:*:*:*:*:* | up to 7.1.6 | Vulnerable | Sun |
| cpe:2.3:h:sun:sparc_enterprise_server_t5220:*:*:*:*:*:*:*:* | up to 7.1.6 | Vulnerable | Sun |
| cpe:2.3:h:sun:sparc_enterprise_server_t5240:*:*:*:*:*:*:*:* | up to 7.1.6 | Vulnerable | Sun |
| cpe:2.3:h:sun:sparc_enterprise_server_t5440:*:*:*:*:*:*:*:* | up to 7.1.5b | Vulnerable | Sun |
- cpe:2.3:h:sun:blade_x8420:*:*:*:*:*:*:*:* Versions up to 2.0.2 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_x8440:*:*:*:*:*:*:*:* Versions up to 2.0.2 Vulnerable ·Sun
- cpe:2.3:h:sun:blade_x8450:*:*:*:*:*:*:*:* Versions up to 2.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x2250_server:*:*:*:*:*:*:*:* Versions up to sw_1.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4100_server:*:*:*:*:*:*:*:* Versions up to sw_1.5.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4100m2_server:*:*:*:*:*:*:*:* Versions up to sw_2.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4140_server:*:*:*:*:*:*:*:* Versions up to sw_2.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4150_server:*:*:*:*:*:*:*:* Versions up to sw_2.0 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4200_server:*:*:*:*:*:*:*:* Versions up to sw_1.5.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4200m2_server:*:*:*:*:*:*:*:* Versions up to sw_2.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4240_server:*:*:*:*:*:*:*:* Versions up to sw_2.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4250_server:*:*:*:*:*:*:*:* Versions up to sw_1.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4440_server:*:*:*:*:*:*:*:* Versions up to sw_2.1 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4450_server:*:*:*:*:*:*:*:* Versions up to sw_2.1.0 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4500_server:*:*:*:*:*:*:*:* Versions up to sw_1.5 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4540_server:*:*:*:*:*:*:*:* Versions up to sw_1.0 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4600_server:*:*:*:*:*:*:*:* Versions up to sw_1.4 Vulnerable ·Sun
- cpe:2.3:h:sun:fire_x4600m2_server:*:*:*:*:*:*:*:* Versions up to sw_2.1.2 Vulnerable ·Sun
- cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:* Versions up to cp3260_atca_blade_server; up to t5220_server Vulnerable ·Sun
- cpe:2.3:h:sun:netra:*:7.1.4a:*:*:*:*:*:* Versions up to t5440_server Vulnerable ·Sun
- cpe:2.3:h:sun:netra_x4200m2_server:*:*:*:*:*:*:*:* Versions up to sw_2.1 Vulnerable ·Sun
- cpe:2.3:h:sun:netra_x4250_server:*:*:*:*:*:*:*:* Versions up to sw_1.1 Vulnerable ·Sun
- cpe:2.3:h:sun:netra_x4450:*:*:*:*:*:*:*:* Versions up to sw_1.1 Vulnerable ·Sun
- cpe:2.3:h:sun:sparc_enterprise_server_t5120:*:*:*:*:*:*:*:* Versions up to 7.1.6 Vulnerable ·Sun
- cpe:2.3:h:sun:sparc_enterprise_server_t5140:*:*:*:*:*:*:*:* Versions up to 7.1.6 Vulnerable ·Sun
- cpe:2.3:h:sun:sparc_enterprise_server_t5220:*:*:*:*:*:*:*:* Versions up to 7.1.6 Vulnerable ·Sun
- cpe:2.3:h:sun:sparc_enterprise_server_t5240:*:*:*:*:*:*:*:* Versions up to 7.1.6 Vulnerable ·Sun
- cpe:2.3:h:sun:sparc_enterprise_server_t5440:*:*:*:*:*:*:*:* Versions up to 7.1.5b Vulnerable ·Sun
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2008-4722
- 2026-10-03 Alias added: GHSA-xhqg-f253-xfr4
References
Advisory 1
Other 1
Sources
- CVE-2008-4722 · CVE Program
- CVE-2008-4722 · NVD
- FIRST EPSS
- GHSA-xhqg-f253-xfr4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences