CVE-2014-2601

The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.

Score

CVSS 2.0 7.8 High

Status

Modified - hp-security-alert@hp.com

Published

2014-04-24

Last modified

2024-08-06

Affected products

• Integrated Lights-out 2 Firmware (Hp)

References

• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04249852-1
• http://www.securitytracker.com/id/1030148
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04244787
• https://isc.sans.edu/forums/diary/Be+Careful+what+you+Scan+for/18017/