Vulnerability in Hp Integrated_lights-out_3_firmware

CVE-2013-2338

Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via u…

EPSS: 0.107 (95.3th percentile) — read the EPSS interpretation.

Affected products

Hp Integrated_lights-out_3_firmware — versions 1.00, 1.05, 1.20
Hp Integrated_lights-out_4_firmware — versions 1.11, 1.13
N/a — versions n/a

References

hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)