HIGH · 10.0

CVE-2014-7876

Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, ex...

Vulnerability Description

Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
HpIntegrated Lights-Out 2 Firmware<= 2.25
HpIntegrated Lights-Out 4 Firmware<= 2.01
HpIntegrated Lights-Out Chassis Management Firmware<= 1.29

References

FAQ

What is CVE-2014-7876?

CVE-2014-7876 is a vulnerability with a CVSS score of 10.0 (HIGH). Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, ex...

How severe is CVE-2014-7876?

CVE-2014-7876 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-7876?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Integrated Lights-Out 2 Firmware, Hp Integrated Lights-Out 4 Firmware, Hp Integrated Lights-Out Chassis Management Firmware.