Sploitus

17 exploited vulnerabilities in Hpe Ilo

Vulnerabilities with publicly known exploits

Vendors
Hewlett Packard, Treck, Openssl, Red Hat, Suse, Apache
With known exploits
17
Affected Treck Tcp\/ip versions
< 6.0.1.66, 6.0.1.41
Affected Hp Integrated Lights-out 4 Firmware versions
< 2.53
Affected Openssl versions
< 0.9.8q, 1.0.0c, 0.9.8k, 1.0, 1.0.2zd, 1.1.1n, 3.0.2, 1.0.2za, 1.1.1l, 1.0.1m, 1.0.2a
Affected Apache Http Server versions
≤ 2.2.14
Affected Gnu Gnutls versions
≤ 2.8.5
Affected Mozilla Nss versions
≤ 3.12.4
Affected Oracle Fujitsu m10 Firmware versions
≤ 2290
Affected Redhat Jboss Enterprise Application Platform versions
= 6.0.0

Vulnerabilities with exploits

Highest CVSS first — 9 of these already have exploit code on Sploitus

CVE-2020-11896 2 exploits
CVSS 10.0 CRITICAL 2020-06-17FIX AVAILABLE
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Treck Tcp\/IpExploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Treck Tcp\/Ip
CVE-2017-12542 10 exploits
CVSS 10.0 CRITICAL 2017-08-23FIX AVAILABLE
Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devicesHP ILO 4 1.00-2.50 Authentication Bypass Administrator Account Creation
CVE-2010-4180
CVSS 10.0 HIGH 1970-01-01FIX AVAILABLE
CVE-2009-3555 15 exploits
CVSS 9.8 CRITICAL 1970-01-01FIX AVAILABLE
metasploitable-vulnerability-mapping-with-nmapExploit for Improper Certificate Validation in Apache Http_Server
CVE-2020-11898 1 exploit
CVSS 9.4 CRITICAL 2020-06-17FIX AVAILABLE
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Treck Tcp\/Ip
CVE-2020-11900
CVSS 8.5 HIGH 2020-06-17FIX AVAILABLE
CVE-2022-0778 2 exploits
CVSS 7.8 HIGH 2022-02-09FIX AVAILABLE
Exploit for Infinite Loop in OpensslExploit for Infinite Loop in Openssl
CVE-2013-4786 3 exploits
CVSS 7.8 HIGH 2013-07-08
IPMI 2.0 RAKP Remote SHA1 Password Hash RetrievalIntelligent Platform Management Interface - Information Disclosure
CVE-2016-2183 9 exploits
CVSS 7.5 HIGH 2016-08-31
CATSploit - An Automated Penetration Testing Tool Using Cyber Attack Techniques ScoringExploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Jboss_Enterprise_Application_Platform
CVE-2021-3712
CVSS 7.4 HIGH 2021-08-24FIX AVAILABLE
CVE-2020-11907
CVSS 6.3 MEDIUM 2020-06-16FIX AVAILABLE
CVE-2020-11906
CVSS 6.3 MEDIUM 2020-06-16FIX AVAILABLE
CVE-2020-11911
CVSS 5.3 MEDIUM 2020-06-16FIX AVAILABLE
CVE-2020-11912
CVSS 5.3 MEDIUM 2020-06-16FIX AVAILABLE
CVE-2020-11914
CVSS 4.3 MEDIUM 2020-06-16FIX AVAILABLE
CVE-2015-4000 2 exploits
CVSS 4.3 MEDIUM 2014-10-24FIX AVAILABLE
TLS1.2_Exploit-ScriptsA2SV - Auto Scanning to SSL Vulnerability
CVE-2014-3566 9 exploits
CVSS 4.3 MEDIUM 1999-01-01FIX AVAILABLE
Exploit for Generation of Predictable IV with CBC Mode in Redhat Enterprise_Linuxsslpwn