CVE-2020-7202

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-05 · updated 2026-06-17

Description

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.

Affected products

Hewlett Packard Enterprise Integrated Lights-Out 4: before 2.76 — fixed in 2.76
HP Integrated Lights-Out 5: before 2.31 — fixed in 2.31

How to fix

Upgrade to a fixed version: Hewlett Packard Enterprise Integrated Lights-Out 4 2.76; HP Integrated Lights-Out 5 2.31. Check the vendor advisory for mitigations.

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04069en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04069en_us

Get alerted when CVE-2020-7202 or the next vulnerability affects your stack