CVE-2014-2601
First published: Thu Apr 24 2014(Updated: )
The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP Integrated Lights-Out 2 | <=2.23 | |
| HP Integrated Lights-Out 2 | =1.00 | |
| HP Integrated Lights-Out 2 | =1.10 | |
| HP Integrated Lights-Out 2 | =1.20 | |
| HP Integrated Lights-Out 2 | =1.30 | |
| HP Integrated Lights-Out 2 | =1.70 | |
| HP Integrated Lights-Out 2 | =1.75 | |
| HP Integrated Lights-Out 2 | =2.12 | |
| HP Integrated Lights-Out 2 | =2.15 | |
| HP Integrated Lights-Out 2 | =2.20 | |
| HP Integrated Lights-Out 2 | =2.22 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04249852-1
- http://www.securitytracker.com/id/1030148
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04244787
- https://isc.sans.edu/forums/diary/Be+Careful+what+you+Scan+for/18017/
Frequently Asked Questions
What is the severity of CVE-2014-2601?
CVE-2014-2601 is classified as a denial of service vulnerability, which can impact the availability of affected systems.
How do I fix CVE-2014-2601?
To mitigate CVE-2014-2601, upgrade the HP Integrated Lights-Out 2 firmware to version 2.23 or later.
What systems are affected by CVE-2014-2601?
CVE-2014-2601 affects HP Integrated Lights-Out 2 firmware versions prior to 2.23.
Can CVE-2014-2601 be exploited remotely?
Yes, CVE-2014-2601 can be exploited by remote attackers through crafted HTTPS traffic.
What impact does CVE-2014-2601 have on my network?
Exploitation of CVE-2014-2601 can lead to a denial of service, disrupting access to the HP Integrated Lights-Out 2 management interface.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/hp
- canonical/hp integrated lights-out 2
- version/hp integrated lights-out 2/2.23
- version/hp integrated lights-out 2/1.00
- version/hp integrated lights-out 2/1.10
- version/hp integrated lights-out 2/1.20
- version/hp integrated lights-out 2/1.30
- version/hp integrated lights-out 2/1.70
- version/hp integrated lights-out 2/1.75
- version/hp integrated lights-out 2/2.12
- version/hp integrated lights-out 2/2.15
- version/hp integrated lights-out 2/2.20
- version/hp integrated lights-out 2/2.22