CVE-2017-12542 - A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found

CRITICAL

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found

Published Feb 15, 2018

10.0

CRITICAL

CVSS 3.0

EPSS 99.29%

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
Prior to 2.53	affected	-

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://www.securityfocus.com/bid/100467		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039222		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4114		Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us		x_refsource_CONFIRMVendor Advisory
https://www.exploit-db.com/exploits/44005/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry