HPE iLO2: Authentication bypass and code execution in iLO2 firmware 2.29

CVE-2017-8979Firmware, BMC & network fabriccurated

Impact

Authentication bypass and code execution in iLO2 firmware 2.29

Who can reach it

Network, unauthenticated

What to do

iLO2 is EOL — remediation is decommissioning or hard network isolation, not patching

References

https://nvd.nist.gov/vuln/detail/CVE-2017-8979

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.