CVE-2016-4375 Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4)....
CriticalCVSS 9.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc integrated lights-out 3 firmware | = 1.87 | No fix listed |
| HP Inc integrated lights-out 4 firmware | = 2.43 | No fix listed |
| HP Inc integrated lights-out 4 mrca firmware | = 2.31 | No fix listed |
References
- 92484 vdb-entry
- 1036629 vdb-entry
- h20566.www2.hpe.com vendor-advisory