CVE-2013-4784: Critical severity hp integrated lights-out vulnerability
The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4784?
CVE-2013-4784 is considered a high-severity vulnerability due to its ability to allow remote attackers to bypass authentication.
How do I fix CVE-2013-4784?
To fix CVE-2013-4784, update the HP Integrated Lights-Out firmware to the latest version provided by HP.
What does CVE-2013-4784 exploit?
CVE-2013-4784 exploits the use of cipher suite 0 in the HP Integrated Lights-Out BMC, allowing unauthorized access.
Who is affected by CVE-2013-4784?
CVE-2013-4784 affects users of HP Integrated Lights-Out BMC implementations that are using vulnerable cipher configurations.
Can CVE-2013-4784 be mitigated?
Yes, CVE-2013-4784 can be mitigated by disabling the use of cipher suite 0 and enforcing stronger authentication protocols.