CVE-2017-12542 - A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) v

CVE-2017-12542

Summary

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.

References

Vulnerable Configurations

cpe:2.3:o:hp:integrated_lights-out_4_firmware:1.11:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:1.11:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:1.13:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:1.13:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:1.20:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:1.20:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:2.01:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:2.01:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:2.03:*:*:*:*:*:*:*
cpe:2.3:o:hp:integrated_lights-out_4_firmware:2.03:*:*:*:*:*:*:*
cpe:2.3:h:hp:integrated_lights-out_4:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:integrated_lights-out_4:-:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	100467
confirm	https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us
exploit-db	44005
sectrack	1039222

Last major update

23-07-2018 - 13:05

Published

15-02-2018 - 22:29

Last modified

23-07-2018 - 13:05