Back to CVE Browser

CVE-2016-4375

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0580%

EPSS Percentile35.66th

PublishedSep 8, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.

Affected Platforms (CPE)

💻

Hp

Integrated Lights Out 3 Firmware

= 1.87

💻

Hp

Integrated Lights Out 4 Firmware

= 2.43

💻

Hp

Integrated Lights Out 4 Mrca Firmware

= 2.31

References & Advisories

🔗 http://www.securityfocus.com/bid/92484

🔗 http://www.securitytracker.com/id/1036629

🔗 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05236950

🔗 http://www.securityfocus.com/bid/92484

🔗 http://www.securitytracker.com/id/1036629

🔗 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05236950

Related Vulnerabilities

CVE-2014-787610.0

Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (C...

CVE-2013-233810.0

Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with fir...

CVE-2017-89799.8

Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication b...

CVE-2012-32719.3

Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50 and Integrated Lights-Out 4 (aka ...