PT-2012-4616 · Hewlett Packard · Hp Integrated Lights-Out 3+2

Published 2012-10-03 · Updated 2017-08-29 · CVE-2012-3271

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Integrated Lights-Out 3 (iLO3) versions prior to 1.50 HP Integrated Lights-Out 4 (iLO4) versions prior to 1.13

Description A security issue affects HP Integrated Lights-Out iLO3 and iLO4, allowing remote attackers to obtain sensitive information. The vulnerability can be remotely exploited, resulting in the disclosure of information.

Recommendations For HP Integrated Lights-Out 3 (iLO3) versions prior to 1.50, update the firmware to version 1.50 or later. For HP Integrated Lights-Out 4 (iLO4) versions prior to 1.13, update the firmware to version 1.13 or later.

Fix

Related Identifiers

CVE-2012-3271

Affected Products

Hp Integrated Lights-Out 3

Hpe Integrated Lights-Out 4

Hpe Ilo

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-3271 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03515413 · Vendor Advisory
• https://support.hpe.com/hpesc/public/docDisplay?docId=c03515413 · Note
• http://securitytracker.com/id?1027790 · Note
• http://secunia.com/advisories/51378 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80155 · Note
• http://securityfocus.com/bid/56597 · Note