CyberSec.Space Logo
Back to CVE Browser

CVE-2013-2338

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0830%
EPSS Percentile30.43th
PublishedJun 14, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via unknown vectors.

Affected Platforms (CPE)

💻
Hp

Integrated Lights Out 3 Firmware

<= 1.55
💻
Hp

Integrated Lights Out 3 Firmware

= 1.00
💻
Hp

Integrated Lights Out 3 Firmware

= 1.05
💻
Hp

Integrated Lights Out 3 Firmware

= 1.20
💻
Hp

Integrated Lights Out 3 Firmware

= 1.26
💻
Hp

Integrated Lights Out 3 Firmware

= 1.28
💻
Hp

Integrated Lights Out 3 Firmware

= 1.50
💻
Hp

Integrated Lights Out 4 Firmware

<= 1.20
💻
Hp

Integrated Lights Out 4 Firmware

= 1.11
💻
Hp

Integrated Lights Out 4 Firmware

= 1.13

References & Advisories

🔗 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03787836
🔗 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03787836

Related Vulnerabilities

CVE-2014-787610.0

Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (C...

CVE-2016-43759.8

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka...

CVE-2017-89799.8

Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication b...

CVE-2012-32719.3

Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50 and Integrated Lights-Out 4 (aka ...