Main
Vulnerability Database
Exploits
ID:1925 - Exploit for Remote code execution in HPE integrated Lights Out (iLO 4) - CVE-2017-12542
ID:1925 - Exploit for Remote code execution in HPE integrated Lights Out (iLO 4) - CVE-2017-12542
Published: March 18, 2020
Vulnerability identifier: #VU8006
Vulnerability risk: High
CVE-ID: CVE-2017-12542
CWE-ID: CWE-592
Exploitation vector: Remote access
Vulnerable software:
HPE integrated Lights Out (iLO 4)
HPE integrated Lights Out (iLO 4)
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the target system.
The weakness exists due to unknown error. A remote attacker can bypass authentication and execute arbitrary code with privileges of the current user.
The weakness exists due to unknown error. A remote attacker can bypass authentication and execute arbitrary code with privileges of the current user.
Remediation
Update to version 2.53 or later.