CVE-2013-4805

HP iLO3/ iLO4 authentication bypass vulnerability CVE-2013-4805 affects HP Integrated Lights-Out firmware: iLO3 prior to 1.60 and iLO4 prior to 1.30. The issue allows remote authentication bypass via unspecified vectors (CVSSv2 base score 9.0, HIGH). Public references and advisories (HP Security ...

Code injection

Unspecified vulnerability on HP Integrated Lights-Out 3 aka iLO3 cards with firmware before 1.57 and 4 aka iLO4 cards with firmware before 1.22, when Single-Sign-On SSO is used, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-2338

HP iLO3 and iLO4 remote code execution (CVE-2013-2338) affects iLO3 firmware prior to 1.57 and iLO4 firmware prior to 1.22 when Single-Sign-On is enabled. The vulnerability, described as an unspecified remote code execution via unknown vectors, has a CVSS v2 base score of 9.3 (HIGH) and requires ...

CVE-2012-3271

HP iLO3 before 1.50 and iLO4 before 1.13 are affected by an unspecified information-disclosure vulnerability (CVE-2012-3271). Remote attackers could obtain sensitive information via unknown vectors. HP’s security bulletin and multiple vulnerability feeds attribute a CVSS v2 base score of 9.3 (HIG...

CVE-2012-3271

Unspecified vulnerability on the HP Integrated Lights-Out 3 aka iLO3 with firmware before 1.50 and Integrated Lights-Out 4 aka iLO4 with firmware before 1.13 allows remote attackers to obtain sensitive information via unknown vectors...