CVE-2017-12542

Published: Feb 15, 2018Updated: Nov 21, 2024 Sources: CVE List NVD BDUNVD-CWE-noinfo

NVD MITRE

10.0CVSSCRITICAL

EPSS Score

Description

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.

CVSS Vector Breakdown

Exploitability

AV:NAttack Vector

Network

AC:LAttack Complexity

Low

PR:NPrivileges Required

None

UI:NUser Interaction

None

Scope

S:CScope

Changed

Impact

C:HConfidentiality

High

I:HIntegrity

High

A:HAvailability

High

Open in CVSS calculator →

Weaknesses

NVD-CWE-noinfo

Affected Products

integrated lights-out 4 firmware hp

EmbeddedFirmware

Hardware Firmware / network-adapter

HPE Integrated Lights-out 4 HP Inc.

On-prem

Enterprise Software / itsm-monitoring

Integrated Lights-out 4 (iLO 4)Hewlett Packard Enterprise Networking Infrastructure

hpcommercialUSEnterprise Softwareaka hewlett packard, hpe

hp inc.commercialUSEnterprise Softwareaka hp

hewlett packard enterprisecommercialUSNetworking Infrastructureaka hewlett packard enterprise, hpe

Exploitability

1 exploit source identified

Exploit details including PoC links, Metasploit modules, and scanner templates are available after registration.

View exploit details

Official Patch Available

Am I actually vulnerable?1 Nuclei template available — see how to check your systems. How to verify Rather we check it for you?We'll check your whole external perimeter for exposure — free. Check my exposure

References

http://www.securityfocus.com/bid/100467

securityfocus.com

http://www.securitytracker.com/id/1039222

securitytracker.com

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us

support.hpe.com

and 4 more references View all →

Timeline

Published

Feb 15, 2018

Last Updated

Nov 21, 2024

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2017-12542 and every CVE in our database. Create a free account — no credit card required.

Create Free Account

Plain-language analysis

Impact assessment and exploitation scenario in plain English

Attack graph visualization

Interactive attack path and kill chain mapping

Exploit details & PoC links

ExploitDB, Metasploit, GitHub PoCs with direct links

Nuclei scanner templates

Ready-to-use vulnerability scanner templates

Full remediation guide

Patch instructions, workarounds, and compliance impact

Interactive AI chat

Ask questions about this vulnerability in natural language

Related vulnerabilities

Semantically similar CVEs and attack patterns

REST API & MCP access

Integrate vulnerability data into your workflows