CVE-2016-4375
highpriority · track · 40EPSS 0.030 · 87 %ileEUUSEPSS · scored 2026-10-24
Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
- hp integrated lights-out 3 firmware= 1.87nvdUScpe:2.3:o:hp:integrated_lights-out_3_firmware:*:*:*:*:*:*:*:*
- hp integrated lights-out 4 firmware= 2.43nvdUScpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*
- hp integrated lights-out 4 mrca firmware= 2.31nvdUScpe:2.3:o:hp:integrated_lights-out_4_mrca_firmware:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- http://www.securityfocus.com/bid/92484cnnvd
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05236950Patchcnnvd
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05236950cnnvd
- http://www.securityfocus.com/bid/92484enisa_euvd
- http://www.securitytracker.com/id/1036629enisa_euvd
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05236950enisa_euvd
- http://www.securityfocus.com/bid/92484nvd
- http://www.securitytracker.com/id/1036629nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan