CVEvulnerability

CVE-2014-2601

7.8 HIGH Published 2014-04-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.

Affected configurations

• hp integrated lights-out 2 firmware (<= 2.23) • hp integrated lights-out 2 firmware 1.00 • hp integrated lights-out 2 firmware 1.10 • hp integrated lights-out 2 firmware 1.20 • hp integrated lights-out 2 firmware 1.30 • hp integrated lights-out 2 firmware 1.70 • hp integrated lights-out 2 firmware 1.75 • hp integrated lights-out 2 firmware 2.12 • hp integrated lights-out 2 firmware 2.15 • hp integrated lights-out 2 firmware 2.20 • hp integrated lights-out 2 firmware 2.22

References