Back to CVE Browser

CVE-2014-7876

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0710%

EPSS Percentile15.43th

PublishedMar 31, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors.

Affected Platforms (CPE)

💻

Hp

Integrated Lights Out 2 Firmware

<= 2.25

💻

Hp

Integrated Lights Out 4 Firmware

<= 2.01

💻

Hp

Integrated Lights Out Chassis Management Firmware

<= 1.29

References & Advisories

🔗 http://www.securitytracker.com/id/1031972

🔗 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04486432

🔗 http://www.securitytracker.com/id/1031972

🔗 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04486432

Related Vulnerabilities

CVE-2013-233810.0

Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with fir...

CVE-2017-89799.8

Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication b...

CVE-2016-43759.8

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka...

CVE-2012-32719.3

Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50 and Integrated Lights-Out 4 (aka ...

CVE-2014-7876 Detail & Impact Analysis | CVSS 10.0 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space