Vulnerability in HP Integrated Lights-Out 3 Firmware
CVE-2013-2338
Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via unknown vectors.
EPSS: 0.104 (95.3th percentile) — read the EPSS interpretation.
Affected products
- Hp Integrated_lights-out_3_firmware — versions 1.00, 1.05, 1.20
- Hp Integrated_lights-out_4_firmware — versions 1.11, 1.13
- N/a — versions n/a
References
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)