CVE-2013-4805
CVE-2013-4805 is a critical-severity vulnerability in Hp Integrated Lights-out Firmware with a CVSS 2.0 base score of 9.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 9.0)
- EPSS exploit prediction: 3% (86th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hp Integrated Lights-out Firmware
- Published:
- Last modified:
Description
Unspecified vulnerability in HP Integrated Lights-Out 3 (aka iLO3) firmware before 1.60 and 4 (aka iLO4) firmware before 1.30 allows remote attackers to bypass authentication via unknown vectors.
Frequently asked questions
- What is CVE-2013-4805?
- Unspecified vulnerability in HP Integrated Lights-Out 3 (aka iLO3) firmware before 1.60 and 4 (aka iLO4) firmware before 1.30 allows remote attackers to bypass authentication via unknown vectors.
- How severe is CVE-2013-4805?
- CVE-2013-4805 has a CVSS 2.0 base score of 9.0, rated critical severity.
- Is CVE-2013-4805 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (86th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2013-4805?
- CVE-2013-4805 primarily affects Hp Integrated Lights-out Firmware. In total, 13 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2013-4805?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2013-4805 published?
- CVE-2013-4805 was published on 2013-08-05 and last updated on 2026-06-16.
References
- http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03844348
- http://www.securityfocus.com/bid/61556
Affected products (13)
- cpe:2.3:o:hp:integrated_lights-out_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.10:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.15:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.15a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.16a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.20a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.26a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.27a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.40a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.41a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.42a:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.50:*:*:*:*:*:*:*
- cpe:2.3:o:hp:integrated_lights-out_firmware:1.50a:*:*:*:*:*:*:*
More vulnerabilities in Hp Integrated Lights-out Firmware
- CVE-2015-5436 — High (CVSS 7.5): A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11…
- CVE-2013-4843 — Medium (CVSS 6.8): Unspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote authenticated…
- CVE-2023-28092 — Medium (CVSS 6.1): A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could…
- CVE-2004-0525 — Medium (CVSS 5.0): HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service…
- CVE-2013-4842 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote…