Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via unknown vectors.
| Software | From | Fixed in |
|---|---|---|
| hp / integrated_lights-out_3_firmware | 1.26 | 1.26.x |
| hp / integrated_lights-out_3_firmware | 1.50 | 1.50.x |
| hp / integrated_lights-out_3_firmware | 1.20 | 1.20.x |
| hp / integrated_lights-out_3_firmware | 1.05 | 1.05.x |
| hp / integrated_lights-out_3_firmware | - | 1.55.x |
| hp / integrated_lights-out_3_firmware | 1.00 | 1.00.x |
| hp / integrated_lights-out_3_firmware | 1.28 | 1.28.x |
| hp / integrated_lights-out_4_firmware | - | 1.20.x |
| hp / integrated_lights-out_4_firmware | 1.13 | 1.13.x |
| hp / integrated_lights-out_4_firmware | 1.11 | 1.11.x |