Vulnerabilities > CVE-2014-7876 - Remote Code Execution vulnerability in HP products

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

critical

NVD

Published: 2015-03-31

Updated: 2019-10-09

Summary

Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors.

Vulnerable Configurations

Part	Description	Count
OS	Hp HP Integrated Lights OUT 2 Firmware 1.00 HP Integrated Lights OUT 2 Firmware 1.10 HP Integrated Lights OUT 2 Firmware 1.20 HP Integrated Lights OUT 2 Firmware 1.30 HP Integrated Lights OUT 2 Firmware 1.70 HP Integrated Lights OUT 2 Firmware 1.75 HP Integrated Lights OUT 2 Firmware 1.77 HP Integrated Lights OUT 2 Firmware 2.12 HP Integrated Lights OUT 2 Firmware 2.15 HP Integrated Lights OUT 2 Firmware 2.20 HP Integrated Lights OUT 2 Firmware 2.22 HP Integrated Lights OUT 2 Firmware 2.23 HP Integrated Lights OUT 2 Firmware 2.25 HP Integrated Lights OUT 4 Firmware 1.11 HP Integrated Lights OUT 4 Firmware 1.13 HP Integrated Lights OUT 4 Firmware 1.20 HP Integrated Lights OUT 4 Firmware 2.01 HP Integrated Lights OUT Chassis Management Firmware 1.29	18

Summary

Vulnerable Configurations

References