EUVD-2017-17927

Malware in sbrugna...

CVE-2018-7093: Undefined Security Weakness

A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service...

Design/Logic Flaw

A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 iLO 3 version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions...

CVE-2017-8987

A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 iLO 3 version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions...

CVE-2017-8987: Undefined Security Weakness

A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 iLO 3 version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions...

PT-2018-8481

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 iLO 3 version v1.88 Description A Unauthenticated Remote Denial of Service issue was identified, allowing remote Denial of Service DoS. The issue is resolved in version v1.89 or subsequent versions. Recommendations...

HP Integrated Lights-Out (iLO) XSS Vulnerability

HP Integrated Lights-Out iLO is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4379

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

CVE-2016-4379: Undefined Security Weakness

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

PT-2016-5925

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 iLO3 versions prior to 1.88 Description The issue is related to the TLS implementation, which does not properly use a MAC protection mechanism in conjunction with CBC padding. This allows remote attackers to obtain...

PT-2016-5921

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 iLO 3 versions prior to 1.88 HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.44 HPE Integrated Lights-Out 4 iLO 4 mRCA versions prior to 2.32 Description The issue allows remote attackers to obtain sensitive...