CVE:CVE-2018-7112
CNNVD:CNNVD-201810-1322
HPE Integrated Lights-Out是美国惠普企业公司（Hewlett Packard Enterprise，HPE）的一套远程控制解决方案。该方案能够对服务器等IT资产进行远程监控和运维。
多款HPE产品中的Windows firmware installer存在信息泄露漏洞。本地攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：使用2.33之前版本固件的HPE Integrated Lights-Out 2；使用1.90之前版本固件的Integrated Lights-Out 3；使用2.60之前版本固件的Integrated Lights-Out 4；使用2018.05.21之前版本固件的ProLiant ML110 G7 Server等。
solution:Upgrade hp integrated_lights-out_2_firmware to a higher version than 2.33,and avoid the version (,2.33); Upgrade hp integrated_lights-out_3_firmware to a higher version than 1.90,and avoid the version (,1.90); Upgrade hp integrated_lights-out_4_firmware to a higher version than 2.60,and avoid the version (,2.60); Upgrade hp proliant_xl750f_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl740f_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl730f_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl450_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl270d_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl270d_gen9_accelerator_tray_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl260a_gen9_server_firmware to a higher version than 1.60_01-22-2018,and avoid the version (,1.60_01-22-2018); Upgrade hp proliant_xl250a_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl230a_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl190r_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_xl170r_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl560_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl380_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl360_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl180_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl160_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl120_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl80_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl60_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl20_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_ml350_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_ml150_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_ml110_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_ml30_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_ml10_gen9_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_bl660c_gen9_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_bl460c_gen9_server_blade_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_ws460c_gen9_workstation_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl380e_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl360p_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl360e_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl320e_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl320e_gen8_v2_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl160_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_sl250s_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_sl210t_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_bl660c_gen8_server_blade_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_bl465c_gen8_(amd)_firmware to a higher version than 2018.03.14,and avoid the version (,2018.03.14); Upgrade hp proliant_bl460c_gen8_server_blade_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_bl420c_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_sl4540_gen8_1_node_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_sl270s_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl580_gen8_server_firmware to a higher version than 2.00_02-22-2018,and avoid the version (,2.00_02-22-2018); Upgrade hp proliant_dl560_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl380p_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_dl385p_gen8_(amd)_firmware to a higher version than 2018.03.14,and avoid the version (,2018.03.14); Upgrade hp proliant_ml350e_gen8_v2_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_ml350e_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_ml350p_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_ml310e_gen8_v2_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_ml310e_gen8_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_microserver_gen8_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_m710_server_cartridge_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_m710p_server_cartridge_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_m710x_server_cartridge_firmware to a higher version than 1.64_01-22-2018,and avoid the version (,1.64_01-22-2018); Upgrade hp proliant_m510_server_cartridge_firmware to a higher version than 1.64_01-22-2018,and avoid the version (,1.64_01-22-2018); Upgrade hp proliant_m350_server_cartridge_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_m300_server_cartridge_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_bl2x220c_g7_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl585_g7_server_(amd)_firmware to a higher version than 2018.03.14,and avoid the version (,2018.03.14); Upgrade hp proliant_dl980_g7_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl580_g7_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl385_g7_server_firmware to a higher version than 2018.03.14,and avoid the version (,2018.03.14); Upgrade hp proliant_dl380_g7_server_firmware to a higher version than -; Upgrade hp proliant_dl120_g7_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl360_g7_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_bl685c_g7_server_blade_(amd)_firmware to a higher version than 2018.03.14,and avoid the version (,2018.03.14); Upgrade hp proliant_bl680c_g7_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_bl620c_g7_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_bl490c_g7_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_bl465c_g7_server_blade_firmware to a higher version than 2018.03.14,and avoid the version (,2018.03.14); Upgrade hp proliant_bl460c_g7_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_sl390s_g7_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_ml110_g7_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_ml10_v2_server_firmware to a higher version than 2018.01.22,and avoid the version (,2018.01.22); Upgrade hp proliant_sl4545_g7_server_(amd)_firmware to a higher version than 2018.03.14(a,and avoid the version 2018.03.14(a); Upgrade hp proliant_thin_micro_tm200_server_firmware to a higher version than 2.56_01-22-2018,and avoid the version (,2.56_01-22-2018); Upgrade hp proliant_dl380_g6_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl370_g6_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl360_g6_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl320_g6_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_dl180_g6_server_firmware to a higher version than *; Upgrade hp proliant_dl170h_g6_server_firmware to a higher version than *; Upgrade hp proliant_dl170e_g6_server_firmware to a higher version than *; Upgrade hp proliant_dl160_g6_server_firmware to a higher version than *; Upgrade hp proliant_dl120_g6_server_firmware to a higher version than *; Upgrade hp proliant_ml370_g6_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_ml350_g6_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_ml330_g6_server_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_ml150_g6_server_firmware to a higher version than *; Upgrade hp proliant_ml110_g6_server_firmware to a higher version than *; Upgrade hp proliant_sl2x170z_g6_server_firmware to a higher version than *; Upgrade hp proliant_bl490c_g6_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_bl460c_g6_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_sl170z_g6_server_firmware to a higher version than *; Upgrade hp proliant_sl160s_g6_server_firmware to a higher version than *; Upgrade hp proliant_bl2x220c_g6_server_blade_firmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21); Upgrade hp proliant_bl280c_g6_server_bladefirmware to a higher version than 2018.05.21,and avoid the version (,2018.05.21)