CVE-2020-7202

2021-01-0514:08:28

hpe

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.2%

JSON

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.

CNA Affected

[
  {
    "product": "HPE ProLiant Servers, Apollo Products, Converged Systems, and Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5), or Integrated Lights-Out 4 (iLO 4)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to iLO 5 v2.31"
      },
      {
        "status": "affected",
        "version": "Prior to iLO 4 v2.76"
      }
    ]
  }
]