HP Integrated Lights-Out Information Disclosure (CVE-2017-12543)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(504421);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/11/13");

  script_cve_id("CVE-2017-12543");

  script_name(english:"HP Integrated Lights-Out Information Disclosure (CVE-2017-12543)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A remote disclosure of information vulnerability in Moonshot Remote
Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior
to v1.89 and iLO2 prior to v2.30 was found.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/101944");
  # https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03705en_us
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?62ab9fb2");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2017-12543");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(200);

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/02/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/02/15");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/11/13");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:integrated_lights-out_2_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:integrated_lights-out_3_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:integrated_lights-out_4_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/HP");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/HP');

var asset = tenable_ot::assets::get(vendor:'HP');

var vuln_cpes = {
    "cpe:/o:hp:integrated_lights-out_2_firmware" :
        {"versionEndExcluding" : "2.30", "family" : "ILO"},
    "cpe:/o:hp:integrated_lights-out_3_firmware" :
        {"versionEndExcluding" : "1.89", "family" : "ILO"},
    "cpe:/o:hp:integrated_lights-out_4_firmware" :
        {"versionEndExcluding" : "2.53", "family" : "ILO"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);