CVE-2004-0525: Medium severity HP Integrated Lights-out Firmware vulnerability
Published Jun 8, 2004
·Updated
HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero.
Affected Software
14 affected components
HP Integrated Lights-out Firmware=1.6a
HP Integrated Lights-out Firmware=1.10
HP Integrated Lights-out Firmware=1.15
HP Integrated Lights-out Firmware=1.15a
HP Integrated Lights-out Firmware=1.16a
HP Integrated Lights-out Firmware=1.20a
HP Integrated Lights-out Firmware=1.26a
HP Integrated Lights-out Firmware=1.27a
HP Integrated Lights-out Firmware=1.40a
HP Integrated Lights-out Firmware=1.41a
HP Integrated Lights-out Firmware=1.42a
HP Integrated Lights-out Firmware=1.50
HP Integrated Lights-out Firmware=1.50a
HP Integrated Lights-out Firmware=1.51a
Remediation
Patch Available
Event History
Jun 8, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0525?
CVE-2004-0525 is classified as a denial of service vulnerability.
2
How do I fix CVE-2004-0525?
To fix CVE-2004-0525, upgrade to HP Integrated Lights-Out firmware version 1.55 or later.
3
What systems are affected by CVE-2004-0525?
CVE-2004-0525 affects various versions of HP Integrated Lights-Out firmware before version 1.55.
4
Can CVE-2004-0525 be exploited remotely?
Yes, CVE-2004-0525 can be exploited remotely by accessing iLO using the TCP/IP reserved port zero.
5
What impact does CVE-2004-0525 have on systems?
CVE-2004-0525 can cause the HP Integrated Lights-Out interface to hang, leading to a denial of service.