Remote Code Execution Vulnerability in HP Integrated Lights-Out Firmware

CVE-2014-7876

Summary

An unspecified vulnerability exists in HP Integrated Lights-Out (iLO) firmware versions prior to 2.27 for iLO 2 and 2.03 for iLO 4, as well as in iLO Chassis Management firmware versions prior to 1.30. This vulnerability can be exploited remotely, allowing attackers to gain unauthorized privileges, execute arbitrary code, or trigger a denial of service. The attack vectors remain unknown, highlighting the necessity for users to apply the latest firmware updates to protect their systems.

References