Firmware Downgrade Package Restrictions

As of firmware release 5.0.0, Oracle ILOM verifies all firmware downgrade processes to prevent downgrades that might permit malicious actors exploiting known security vulnerabilities and gaining access to Oracle ILOM.  For each downgrade request, Oracle ILOM prevents a downgrade to a less secure version by ensuring that the security level of the incoming firmware package meets or exceeds the security level of the currently installed package. If the incoming package matches or exceeds the security level checks, Oracle ILOM permits the downgrade process without restrictions. However, if the incoming package fails to meet the security level checks, Oracle ILOM displays a message indicating that the downgrade process has failed.