CVE-2016-4375

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-08 · updated 2026-06-17

Description

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.

Affected products

Hewlett Packard Enterprise HPE Integrated Lights-Out 3 (iLO 3): 1.87
Hewlett Packard Enterprise Integrated Lights-out 4 (iLO 4): 2.43
HP Integrated Lights-Out 4 Mrca Firmware: 2.31

References

http://www.securityfocus.com/bid/92484
http://www.securitytracker.com/id/1036629
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05236950
http://www.securityfocus.com/bid/92484
http://www.securitytracker.com/id/1036629
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05236950

Get alerted when CVE-2016-4375 or the next vulnerability affects your stack