HP Integrated Lights-Out Information Disclosure (CVE-2018-7112)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(504408);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/11/13");

  script_cve_id("CVE-2018-7112");

  script_name(english:"HP Integrated Lights-Out Information Disclosure (CVE-2018-7112)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The HPE-provided Windows firmware installer for certain Gen9, Gen8,
G7,and G6 HPE servers allows local disclosure of privileged
information. This issue was resolved in previously provided firmware
updates as follows. The HPE Windows firmware installer was updated in
the system ROM updates which also addressed the original
Spectre/Meltdown set of vulnerabilities. At that time, the Windows
firmware installer was also updated in the versions of HPE Integrated
Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security
bulletin. The updated HPE Windows firmware installer was released in
the system ROM and HPE Integrated Lights-Out (iLO) releases documented
in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835,
HPESBHF03831. Windows-based systems that have already been updated to
the system ROM or iLO versions described in these security bulletins
require no further action.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://www.securitytracker.com/id/1041984");
  # https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b8e84743");
  # https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?edd33d46");
  # https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?bc7a6d4d");
  # https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b4e0dabe");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-7112");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/12/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/12/03");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/11/13");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:integrated_lights-out_2_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:integrated_lights-out_3_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:integrated_lights-out_4_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/HP");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/HP');

var asset = tenable_ot::assets::get(vendor:'HP');

var vuln_cpes = {
    "cpe:/o:hp:integrated_lights-out_2_firmware" :
        {"versionEndExcluding" : "2.33", "family" : "ILO"},
    "cpe:/o:hp:integrated_lights-out_3_firmware" :
        {"versionEndExcluding" : "1.90", "family" : "ILO"},
    "cpe:/o:hp:integrated_lights-out_4_firmware" :
        {"versionEndExcluding" : "2.60", "family" : "ILO"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);