HP Integrated Lights-Out Information Exposure (CVE-2012-3271)

Unspecified vulnerability on the HP Integrated Lights-Out 3 aka iLO3 with firmware before 1.50 and Integrated Lights-Out 4 aka iLO4 with firmware before 1.13 allows remote attackers to obtain sensitive information via unknown vectors. This plugin only works with Tenable.ot. Please visit...

EUVD-2017-17927

Malware in sbrugna...

CVE-2018-7093: Undefined Security Weakness

A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service...

Design/Logic Flaw

A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 iLO 3 version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions...

CVE-2017-8987

A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 iLO 3 version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions...

CVE-2017-8987: Undefined Security Weakness

A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 iLO 3 version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions...

Bug in HP Remote Management Tool Leaves Servers Open to Attack

Hewlett Packard Enterprise has patched a vulnerability in its remote management hardware called Integrated Lights-Out 3 that is used in its popular line of HP ProLiant servers. The bug allows an attacker to launch an unauthenticated remote denial of service attack that could contribute to a...

PT-2018-8481

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 iLO 3 version v1.88 Description A Unauthenticated Remote Denial of Service issue was identified, allowing remote Denial of Service DoS. The issue is resolved in version v1.89 or subsequent versions. Recommendations...

HP Integrated Lights-Out (iLO) XSS Vulnerability

HP Integrated Lights-Out iLO is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4379

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

CVE-2016-4379: Undefined Security Weakness

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

PT-2016-5925

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 iLO3 versions prior to 1.88 Description The issue is related to the TLS implementation, which does not properly use a MAC protection mechanism in conjunction with CBC padding. This allows remote attackers to obtain...

PT-2016-5921

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 iLO 3 versions prior to 1.88 HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.44 HPE Integrated Lights-Out 4 iLO 4 mRCA versions prior to 2.32 Description The issue allows remote attackers to obtain sensitive...

CVE-2013-4805: Undefined Security Weakness

Unspecified vulnerability in HP Integrated Lights-Out 3 aka iLO3 firmware before 1.60 and 4 aka iLO4 firmware before 1.30 allows remote attackers to bypass authentication via unknown vectors...

PT-2013-5204

Name of the Vulnerable Software and Affected Versions HP Integrated Lights-Out 3 iLO3 versions prior to 1.60 HP Integrated Lights-Out 4 iLO4 versions prior to 1.30 Description A security issue has been identified that could allow remote attackers to bypass authentication. The estimated number of...

CVE-2013-2338: Undefined Security Weakness

Unspecified vulnerability on HP Integrated Lights-Out 3 aka iLO3 cards with firmware before 1.57 and 4 aka iLO4 cards with firmware before 1.22, when Single-Sign-On SSO is used, allows remote attackers to execute arbitrary code via unknown vectors...

PT-2013-3681

Name of the Vulnerable Software and Affected Versions HP Integrated Lights-Out 3 iLO3 versions prior to 1.57 HP Integrated Lights-Out 4 iLO4 versions prior to 1.22 Description The issue concerns an unspecified vulnerability in HP Integrated Lights-Out 3 and 4 when Single-Sign-On SSO is used. This...

CVE-2012-3271: Undefined Security Weakness

Unspecified vulnerability on the HP Integrated Lights-Out 3 aka iLO3 with firmware before 1.50 and Integrated Lights-Out 4 aka iLO4 with firmware before 1.13 allows remote attackers to obtain sensitive information via unknown vectors...