ID:6319 - Exploit for Remote code execution in HPE integrated Lights Out (iLO 4) - CVE-2017-12542

 
Main Vulnerability Database Exploits ID:6319 - Exploit for Remote code execution in HPE integrated Lights Out (iLO 4) - CVE-2017-12542

ID:6319 - Exploit for Remote code execution in HPE integrated Lights Out (iLO 4) - CVE-2017-12542

Published: June 17, 2021


Vulnerability identifier: #VU8006
Vulnerability risk: High
CVE-ID: CVE-2017-12542
CWE-ID: CWE-592
Exploitation vector: Remote access
Vulnerable software:
HPE integrated Lights Out (iLO 4)

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise the target system.

The weakness exists due to unknown error. A remote attacker can bypass authentication and execute arbitrary code with privileges of the current user.

Remediation

Update to version 2.53 or later.