CVE:CVE-2021-29210
CNNVD:CNNVD-202105-1250
Hewlett Packard Enterprise Integrated Lights-Out等都是美国惠普企业公司（Hewlett Packard Enterprise）的产品。Hewlett Packard Enterprise Integrated Lights-Out是一套远程控制解决方案。Hewlett Packard Enterprise SimpliVity 380 Gen 10是一款服务器。Hewlett Packard Enterprise SimpliVity 380 Gen 10 G是一款服务器。
多款 Hewlett Packard Enterprise 产品存在注入漏洞。以下产品及版本受到影响：HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78。
solution:Upgrade hp integrated_lights-out_4 to a higher version than 2.78,and avoid the version (,2.78); Upgrade hp integrated_lights-out_5 to a higher version than 2.44,and avoid the version (,2.44)