critical10.0Public exploit code
CVE-2017-12542
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HPE iLO 4 < 2.53 - Add New Administrator User2018-02-05 · remote · multiple
Impact
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Integrated Lights-Out 4 Firmware | before 2.53 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100467
- http://www.securitytracker.com/id/1039222
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us
- https://www.exploit-db.com/exploits/44005/
- http://www.securityfocus.com/bid/100467
- http://www.securitytracker.com/id/1039222
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us
- https://www.exploit-db.com/exploits/44005/