The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
| Software | From | Fixed in |
|---|---|---|
| hp / integrated_lights-out_2_firmware | 2.12 | 2.12.x |
| hp / integrated_lights-out_2_firmware | - | 2.23.x |
| hp / integrated_lights-out_2_firmware | 1.20 | 1.20.x |
| hp / integrated_lights-out_2_firmware | 1.10 | 1.10.x |
| hp / integrated_lights-out_2_firmware | 1.00 | 1.00.x |
| hp / integrated_lights-out_2_firmware | 2.22 | 2.22.x |
| hp / integrated_lights-out_2_firmware | 1.75 | 1.75.x |
| hp / integrated_lights-out_2_firmware | 1.30 | 1.30.x |
| hp / integrated_lights-out_2_firmware | 2.20 | 2.20.x |
| hp / integrated_lights-out_2_firmware | 1.70 | 1.70.x |
| hp / integrated_lights-out_2_firmware | 2.15 | 2.15.x |