PT-2017-12573 · Hewlett Packard · Hpe Ilo 4+4

Published 2017-08-24 · Updated 2018-03-12 · CVE-2017-12543

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE iLO 4 versions prior to 2.53 HPE iLO 3 versions prior to 1.89 HPE iLO 2 versions prior to 2.30 Moonshot Remote Console Administrator versions prior to 2.50

Description A remote disclosure of information issue was found, which could be exploited to allow disclosure of information.

Recommendations For HPE iLO 4 versions prior to 2.53, update to version 2.53 or later. For HPE iLO 3 versions prior to 1.89, update to version 1.89 or later. For HPE iLO 2 versions prior to 2.30, update to version 2.30 or later. For Moonshot Remote Console Administrator versions prior to 2.50, update to version 2.50 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-12543

Affected Products

Hpe Ilo

Hp Ilo 2

Hpe Ilo 3

Hpe Ilo 4

Moonshot Remote Console Administrator

References · 4

• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03705en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12543 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12543 · Vendor Advisory
• http://securityfocus.com/bid/101944 · Note