HP Integrated Lights-Out CVE-2018-7101 Remote Denial of Service Vulnerability_

Bugtraq ID:	107298
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-7101
Remote:	Yes
Local:	No
Published:	Aug 14 2018 12:00AM
Updated:	Aug 14 2018 12:00AM
Credit:	Matias Soler
Vulnerable:	HP Integrated Lights-Out 5 1.11 HP Integrated Lights-Out 4 firmware 2.53 HP Integrated Lights-Out 4 firmware 2.50 HP Integrated Lights-Out 4 firmware 2.44 HP Integrated Lights-Out 4 firmware 2.22 HP Integrated Lights-Out 4 firmware 2.20 HP Integrated Lights-Out 4 firmware 2.03 HP Integrated Lights-Out 4 firmware 1.32 HP Integrated Lights-Out 4 firmware 1.30 HP Integrated Lights-Out 4 firmware 1.22 HP Integrated Lights-Out 4 firmware 1.13 HP Integrated Lights-Out 4 firmware 1.11 HP Integrated Lights-Out 4 firmware 2.10 HP Gen 10 Servers 0
Not Vulnerable:	HP Integrated Lights-Out 5 1.30 HP Integrated Lights-Out 4 firmware 2.60

HP Integrated Lights-Out CVE-2018-7101 Remote Denial of Service Vulnerability_

HP Integrated Lights-Out is prone to an unspecified remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to trigger denial-of-service conditions.

The following versions are vulnerable:

Versions prior to Integrated Lights-Out 4 (iLO 4) 2.60
Versions prior to Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers 1.30

HP Integrated Lights-Out CVE-2018-7101 Remote Denial of Service Vulnerability_

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Integrated Lights-Out CVE-2018-7101 Remote Denial of Service Vulnerability_

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Integrated Lights-Out CVE-2018-7101 Remote Denial of Service Vulnerability_

References:

• HP HomePage (HP)
  
• HPESBHF03875 rev.1 - HPE Integrated Lights Out 4 and 5, (iLO 4, 5), Remote DoS (HP)