Vulnerability in HP Integrated Lights-Out 4
CVE-2015-5436
A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service (DoS). Note this was originally published in 2015 however the CVE entry was added in 2020.
EPSS: 0.016 (74.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Hp Integrated_lights-out_4
- Hp Integrated_lights-out_firmware
- N/a Hp Integrated Lights-out 4 (Ilo 4) — versions firmware version 2.11 and later, but prior to version 2.30
References
- hp-security-alert@hp.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2015-5436?
- CVE-2015-5436 is a high-severity vulnerability in HP Integrated Lights-Out 4. CVSS score: 7.5/10. Published 2017-05-11.
- How severe is CVE-2015-5436?
- High severity. CVSS v3 base score is 7.5 out of 10.