CVE-2017-12542
| Reporter | Title | Published | Views | Family All 36 |
|---|---|---|---|---|
 | HPE iLO4 < 2.53 - Add New Administrator User Exploit | 8 Feb 201800:00 | – | zdt |
 | Exploit for CVE-2017-12542 | 16 Aug 201900:03 | – | githubexploit |
| Exploit for CVE-2017-12542 | 5 Feb 201818:55 | – | githubexploit |
 | CVE-2017-12542 | 15 Feb 201800:00 | – | attackerkb |
 | HPE Integrated Lights-out 4 Authentication Bypass Code Execution | 7 Jun 201800:00 | – | bdu_fstec |
 | CVE-2017-12542 | 27 Apr 201823:53 | – | circl |
 | HP Integrated Lights-out 4 Remote Code Execution Vulnerability | 25 Aug 201700:00 | – | cnvd |
 | HPE Integrated Lights-Out 4 Authentication Bypass (CVE-2017-12542) | 8 Jul 201800:00 | – | checkpoint_advisories |
| HPE Lights-Out Authentication Bypass (CVE-2017-12542) | 22 Nov 201800:00 | – | checkpoint_advisories |
 | CVE-2017-12542 | 15 Feb 201822:00 | – | cvelist |
10
Node
AND
[
{
"product": "Integrated Lights-out 4 (iLO 4)",
"vendor": "Hewlett Packard Enterprise",
"versions": [
{
"status": "affected",
"version": "Prior to 2.53"
}
]
}
]| Source | Link |
|---|---|
| securitytracker | www.securitytracker.com/id/1039222 |
| support | www.support.hpe.com/hpsc/doc/public/display |
| securityfocus | www.securityfocus.com/bid/100467 |
| exploit-db | www.exploit-db.com/exploits/44005/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| UserName | request body | /rest/v1/AccountService/Accounts | Authentication bypass and potential privilege escalation via the AccountService/Accounts endpoint (POST) to create admin user. | |
| Password | request body | /rest/v1/AccountService/Accounts | Authentication bypass and potential privilege escalation via the AccountService/Accounts endpoint (POST) to create admin user. | |
| Oem | request body | /rest/v1/AccountService/Accounts | Authentication bypass and potential privilege escalation via the AccountService/Accounts endpoint (POST) to create admin user. | |
| item | query param | /xmldata?item=ALL | Scanner/recon endpoint used to fingerprint iLO devices by exposing firmware/version data. |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:03Current
9.5Critical risk
Vulners AI Score9.5
CVSS 310
CVSS 210
EPSS0.99294