Unspecified vulnerability in HP Integrated Lights-Out 3 (aka iLO3) firmware before 1.60 and 4 (aka iLO4) firmware before 1.30 allows remote

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• hp integrated lights-out firmwareup to 1.51a inclusive
• hp integrated lights-out firmware1.10
• hp integrated lights-out firmware1.15
• hp integrated lights-out firmware1.15a
• hp integrated lights-out firmware1.16a
• hp integrated lights-out firmware1.20a
• hp integrated lights-out firmware1.26a
• hp integrated lights-out firmware1.27a
• hp integrated lights-out firmware1.40a
• hp integrated lights-out firmware1.41a
• hp integrated lights-out firmware1.42a
• hp integrated lights-out firmware1.50
• hp integrated lights-out firmware1.50a

Other highest-scoring records for the same primary product.

• CVE-2015-5436A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and later, but prior to
  30Monitor
• CVE-2013-4843Unspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote authenticated users to obtain sensiti
  28Monitor
• CVE-2023-28092A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server.
  27Monitor
• CVE-2004-0525HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing
  21Monitor
• CVE-2013-4842Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject ar
  18Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.