iLO 4 < 2.60 / iLO 5 < 1.30 Multiple Vulnerabilities

According to its version number, the remote HP Integrated Lights-Out iLO server is affected by multiple vulnerabilities: - A remote command execution vulnerability exists in HP Integrated Lights-Out iLO server due to an unspecified reason. An unauthenticated, remote attacker can exploit this to...

CVE-2018-7078

CVE-2018-7078 describes a remote code execution impacting Hewlett Packard Enterprise’s HP Integrated Lights-Out (iLO) servers. The provided documents confirm exploitation could occur on iLO 4 versions earlier than 2.60 and iLO 5 versions earlier than 1.30, with a network-based attacker and no use...