CVE-2017-12542 HPE Integrated Lights-Out 4 Remote Code Execution Vulnerability

The HPE Integrated Lights-Out (iLO) is an embedded server management technology that is useful as an out-of-band management technology.

A potential security vulnerability has been identified in HPE Integrated Lights-out (iLO 4). The vulnerability could be exploited remotely to allow authentication bypass and execution of code.

Affected Versions:
HP Integrated Lights-Out 4 (iLO 4), Prior to 2.53

A remote attacker could exploit the vulnerability to bypass authentication and execution of code.

Customers are advised to visit hpesbhf03769en_us to remediate this vulnerability.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

hpesbhf03769en_us (Integrated Lights-Out 4)