CVE-2018-7105: hewlett packard enterprise hpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hpe integrated lights-out 4 (ilo 4), hpe integrated lights-out 3 (ilo 3)
Vulnerability summary
CVE-2018-7105 is a high (CVSS 9.0) vulnerability in hewlett packard enterprise hpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hpe integrated lights-out 4 (ilo 4), hpe integrated lights-out 3 (ilo 3). EPSS estimates a 4.11% chance of exploitation in the next 30 days, higher than 90.6% of scored vulnerabilities.
Timeline
- 27-09-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.11%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.11% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Hp3 products
Hewlett packard enterprise1 product
- hpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hpe integrated lights-out 4 (ilo 4), hpe integrated lights-out 3 (ilo 3)HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90
2 vendors · 4 products
References
3 links- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03866en_usX Refsource CONFIRMMitigationVendor Advisory