What’s Vulnerable › Vulnerabilities

CVE-2015-2106

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-03-31 · updated 2026-06-17

Description

Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors.

Affected products

• Hewlett Packard Enterprise Integrated Lights-Out 2 (iLO 2): through 2.25
• Hewlett Packard Enterprise HPE Integrated Lights-Out 3 (iLO 3): through 1.80
• Hewlett Packard Enterprise Integrated Lights-out 4 (iLO 4): through 2.03

References

• http://www.securityfocus.com/bid/73324
• http://www.securitytracker.com/id/1031974
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04582368
• http://www.securityfocus.com/bid/73324
• http://www.securitytracker.com/id/1031974
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04582368

Get alerted when CVE-2015-2106 or the next vulnerability affects your stack