What’s Vulnerable › Vulnerabilities
CVE-2014-2601
- Severity: high (CVSS 7.8 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2014-04-24 · updated 2026-06-17
Description
The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
Affected products
- Hewlett Packard Enterprise Integrated Lights-Out 2 (iLO 2): through 2.23; 1.00, 1.10, 1.20, 1.30, 1.70, 1.75 (+4)
References
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04249852-1
- http://www.securitytracker.com/id/1030148
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04244787
- https://isc.sans.edu/forums/diary/Be+Careful+what+you+Scan+for/18017/
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04249852-1
- http://www.securitytracker.com/id/1030148
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04244787
- https://isc.sans.edu/forums/diary/Be+Careful+what+you+Scan+for/18017/
Get alerted when CVE-2014-2601 or the next vulnerability affects your stack