Hp Integrated Lights-out 2 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Hp Integrated Lights-out 2 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2014-7876 — CVSS 10.0 (critical): Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM)…
• CVE-2017-8979 — CVSS 9.8 (critical): Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass…
• CVE-2014-2601 — CVSS 7.8 (high): The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted…
• CVE-2017-12543 — CVSS 6.5 (medium): A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to…
• CVE-2015-2106 — CVSS 6.4 (medium): Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote…
• CVE-2018-7112 — CVSS 5.5 (medium): The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged…