What’s Vulnerable › Vulnerabilities

CVE-2023-50272

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-19 · updated 2026-06-17
• Weakness: CWE-288

Description

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulnerability could be remotely exploited to allow authentication bypass.

Affected products

• HPE Integrated Lights-Out 5 (iLO 5): from 2.63 through 3.00
• Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out 6 (iLO 6): from 1.05 through 1.55

References

• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04584en_us
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04584en_us

Get alerted when CVE-2023-50272 or the next vulnerability affects your stack