A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00474.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a HPE ProLiant Servers, Apollo Products, Converged Systems, and Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5), or Integrated Lights-Out 4 (iLO 4) affected
Version Status Constraints
Prior to iLO 5 v2.31 affected —
Prior to iLO 4 v2.76 affected —

Configuration 1 [-]

AND
cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hp:apollo_4200_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:convergedsystem_cs700:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:convergedsystem_cs700x:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_bl465c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_bl660c_gen8_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl385p_gen8_\(amd\):-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl580_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_microserver_gen8:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml350e_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_sl230s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_sl270s_gen8_se_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_sl4540_gen8_3_node_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ws460c_gen8_graphics_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ws460c_gen9_graphics_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl220a_gen8_v2_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl450_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:synergy_480_gen9_compute_module:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:hp:integrated_lights-out_5:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hp:apollo_4200_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:apollo_4510_system:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:apollo_r2000_chassis:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:convergedsystem_cs700:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:convergedsystem_cs700x:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_bl460c_gen10_server_blade:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl120_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl160_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl180_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl20_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl325_gen10_plus_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl325_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl360_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl380_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl385_gen10_plus_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl385_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl560_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_dl580_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml110_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml30_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_ml350_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl170r_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl190r_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl230k_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl270d_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:proliant_xl450_gen10_server:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:synergy_480_gen10_compute_module:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:synergy_660_gen10_compute_module:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Hp Subscribe
Apollo 4200 Gen10 Server Subscribe
Apollo 4200 Gen9 Server Subscribe
Apollo 4510 System Subscribe
Apollo R2000 Chassis Subscribe
Convergedsystem Cs700 Subscribe
Convergedsystem Cs700x Subscribe
Integrated Lights-out 4 Subscribe
Integrated Lights-out 5 Subscribe
Proliant Bl420c Gen8 Server Subscribe
Proliant Bl460c Gen10 Server Blade Subscribe
Proliant Bl460c Gen8 Server Blade Subscribe
Proliant Bl460c Gen9 Server Blade Subscribe
Proliant Bl465c Gen8 Server Blade Subscribe
Proliant Bl660c Gen8 Server Blade Subscribe
Proliant Bl660c Gen9 Server Subscribe
Proliant Dl120 Gen10 Server Subscribe
Proliant Dl120 Gen9 Server Subscribe
Proliant Dl160 Gen10 Server Subscribe
Proliant Dl160 Gen8 Server Subscribe
Proliant Dl160 Gen9 Server Subscribe
Proliant Dl180 Gen10 Server Subscribe
Proliant Dl180 Gen9 Server Subscribe
Proliant Dl20 Gen10 Server Subscribe
Proliant Dl320e Gen8 Server Subscribe
Proliant Dl320e Gen8 V2 Server Subscribe
Proliant Dl325 Gen10 Plus Server Subscribe
Proliant Dl325 Gen10 Server Subscribe
Proliant Dl360 Gen10 Server Subscribe
Proliant Dl360 Gen9 Server Subscribe
Proliant Dl360e Gen8 Server Subscribe
Proliant Dl360p Gen8 Server Subscribe
Proliant Dl380 Gen10 Server Subscribe
Proliant Dl380 Gen9 Server Subscribe
Proliant Dl380e Gen8 Server Subscribe
Proliant Dl380p Gen8 Server Subscribe
Proliant Dl385 Gen10 Plus Server Subscribe
Proliant Dl385 Gen10 Server Subscribe
Proliant Dl385p Gen8 \(amd\) Subscribe
Proliant Dl560 Gen10 Server Subscribe
Proliant Dl560 Gen8 Server Subscribe
Proliant Dl560 Gen9 Server Subscribe
Proliant Dl580 Gen10 Server Subscribe
Proliant Dl580 Gen8 Server Subscribe
Proliant Dl580 Gen9 Server Subscribe
Proliant Dl60 Gen9 Server Subscribe
Proliant Dl80 Gen9 Server Subscribe
Proliant Microserver Gen8 Subscribe
Proliant Ml110 Gen10 Server Subscribe
Proliant Ml110 Gen9 Server Subscribe
Proliant Ml30 Gen10 Server Subscribe
Proliant Ml30 Gen9 Server Subscribe
Proliant Ml310e Gen8 Server Subscribe
Proliant Ml310e Gen8 V2 Server Subscribe
Proliant Ml350 Gen10 Server Subscribe
Proliant Ml350 Gen9 Server Subscribe
Proliant Ml350e Gen8 Server Subscribe
Proliant Ml350e Gen8 V2 Server Subscribe
Proliant Ml350p Gen8 Server Subscribe
Proliant Sl210t Gen8 Server Subscribe
Proliant Sl230s Gen8 Server Subscribe
Proliant Sl250s Gen8 Server Subscribe
Proliant Sl270s Gen8 Se Server Subscribe
Proliant Sl270s Gen8 Server Subscribe
Proliant Sl4540 Gen8 3 Node Server Subscribe
Proliant Ws460c Gen8 Graphics Server Blade Subscribe
Proliant Ws460c Gen9 Graphics Server Blade Subscribe
Proliant Xl170r Gen10 Server Subscribe
Proliant Xl170r Gen9 Server Subscribe
Proliant Xl190r Gen10 Server Subscribe
Proliant Xl190r Gen9 Server Subscribe
Proliant Xl220a Gen8 V2 Server Subscribe
Proliant Xl230a Gen9 Server Subscribe
Proliant Xl230k Gen10 Server Subscribe
Proliant Xl250a Gen9 Server Subscribe
Proliant Xl270d Gen10 Server Subscribe
Proliant Xl450 Gen10 Server Subscribe
Proliant Xl450 Gen9 Server Subscribe
Proliant Xl730f Gen9 Server Subscribe
Proliant Xl740f Gen9 Server Subscribe
Proliant Xl750f Gen9 Server Subscribe
Synergy 480 Gen10 Compute Module Subscribe
Synergy 480 Gen9 Compute Module Subscribe
Synergy 660 Gen10 Compute Module Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2020-28336 A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04069en_us cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2024-08-04T09:25:48.181Z

Reserved: 2020-01-16T00:00:00

Link: CVE-2020-7202

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-01-05T15:15:14.077

Modified: 2024-11-21T05:36:49.233

Link: CVE-2020-7202

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses