Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2018-7105 Details

Description

A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.2 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03866en_us CVEMitigationVendor Advisory
http://www.securityfocus.com/bid/105425 CVEThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041649 CVEThird Party AdvisoryVDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03866en_us [email protected]MitigationVendor Advisory
http://www.securityfocus.com/bid/105425 [email protected]Third Party AdvisoryVDB Entry

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
hp integrated lights-out 5 firmware
< 1.35

CPE

  • cpe:2.3:o:hp:integrated_lights-out_5_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hp gen 10 servers
All versions

CPE

  • cpe:2.3:h:hp:gen_10_servers:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hp integrated lights-out
All versions

CPE

  • cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hp integrated lights-out 3 firmware
< 1.90

CPE

  • cpe:2.3:o:hp:integrated_lights-out_3_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hp integrated lights-out 4 firmware
< 2.61

CPE

  • cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2018-7105
NVD Published Date:
Sep 27, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2018-7105 Details - Not Deferred