CVE-2020-7202
First published: Tue Jan 05 2021(Updated: )
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP Integrated Lights-Out 4 Firmware | <2.76 | |
| Hewlett Packard Enterprise Apollo 4200 Gen9 Server | ||
| HP Converged System CS700x | ||
| HP Converged System CS700x | ||
| HPE ProLiant BL420c Gen8 Server | ||
| HPE ProLiant BL460c Gen8 Blade Server | ||
| HPE ProLiant BL460c Gen9 Server Blade | ||
| HP ProLiant BL465c Gen8 (AMD) | ||
| HPE ProLiant bl660c Gen8 Blade Server | ||
| HPE ProLiant bl660c gen9 server blade | ||
| HPE ProLiant DL120 Gen9 Server | ||
| HPE ProLiant DL160 Gen8 Server | ||
| HPE ProLiant DL160 Gen9 Server | ||
| HP ProLiant DL180 Gen9 | ||
| HPE ProLiant DL320e Gen8 v2 Server | ||
| HP ProLiant DL320e Gen8 Server Firmware | ||
| HP ProLiant DL360 Gen9 | ||
| HPE ProLiant DL360e Gen8 Server | ||
| HP ProLiant DL360p Gen8 Server Firmware | ||
| HPE ProLiant DL380 Gen9 Server | ||
| HP ProLiant DL380e Gen8 Server Firmware | ||
| HPE ProLiant DL380p Gen8 Server | ||
| HP ProLiant DL385p Gen8 (AMD) | ||
| HPE ProLiant DL560 Gen8 Server | ||
| HP ProLiant DL560 Gen9 Server Firmware | ||
| HP ProLiant DL580 Gen8 Server Firmware | ||
| HPE ProLiant DL580 Gen9 Server | ||
| HP ProLiant DL60 Gen9 Server | ||
| HPE ProLiant DL80 Gen9 Server | ||
| HPE ProLiant MicroServer Gen8 | ||
| HP ProLiant ML110 Gen9 Server Firmware | ||
| HP ProLiant ML30 Gen9 | ||
| HP ProLiant ML310e Gen8 v2 Server | ||
| HPE ProLiant ML310e Gen8 v2 Server | ||
| HP ProLiant ML350 | ||
| HPE ProLiant ML350e Gen8 v2 Server | ||
| HPE ProLiant ML350e Gen8 v2 Server | ||
| HP ProLiant ML350p Gen8 Server Firmware | ||
| HP ProLiant SL210t Gen8 Server Firmware | ||
| HPE ProLiant SL230s Gen8 Server | ||
| HP ProLiant SL250s Gen8 Server Firmware | ||
| HPE ProLiant SL270s Gen8 Server | ||
| HPE ProLiant SL270s Gen8 Server Firmware | ||
| HPE ProLiant SL4540 Gen8 Server | ||
| HPE ProLiant WS460c Gen8 Graphics Server Blade | ||
| HPE ProLiant WS460c Gen9 Graphics Server Blade | ||
| HP ProLiant XL170r Gen9 Server Firmware | ||
| HP ProLiant XL190r Gen9 Server Firmware | ||
| HPE ProLiant XL220a Gen8 v2 Server | ||
| HPE ProLiant XL230a Gen9 Server | ||
| HPE ProLiant XL250a Gen9 Server | ||
| HPE ProLiant XL450 Gen9 Server | ||
| HPE ProLiant xl730f Gen9 Server | ||
| HP ProLiant XL740f Gen9 | ||
| HP ProLiant XL750f Gen9 | ||
| HPE Synergy 480 Gen9 Compute Module | ||
| HP Integrated Lights-Out | <2.31 | |
| HPE Apollo 4200 Gen10 Server | ||
| HPE Apollo 4510 Gen10 System | ||
| HPE Apollo R2000 Chassis | ||
| HPE ProLiant BL460c Gen10 Server Blade | ||
| HP ProLiant DL120 Gen10 Firmware | ||
| HPE ProLiant DL160 Gen10 Server | ||
| HP ProLiant DL180 Gen10 | ||
| HPE ProLiant DL20 Gen10 Server firmware | ||
| HPE ProLiant DL325 Gen10 Plus Server | ||
| HPE ProLiant DL325 Gen10 Server | ||
| HPE ProLiant DL360 Gen10 Server | ||
| HPE ProLiant DL380 Gen10 Server | ||
| HPE ProLiant DL385 Gen10 Plus Server | ||
| HP ProLiant dl385 Gen10 | ||
| HP ProLiant dl560 Gen10 | ||
| HP ProLiant dl580 Gen10 | ||
| HPE ProLiant ML110 Gen10 Server | ||
| HPE ProLiant ML30 Gen10 Server | ||
| HP ProLiant ML350 | ||
| HP ProLiant xl170r Gen10 | ||
| HPE ProLiant XL190r Gen10 Server | ||
| HP ProLiant XL230K Gen10 Firmware | ||
| HPE ProLiant XL270d Gen10 Server | ||
| HPE ProLiant XL450 Gen10 Server | ||
| HPE Synergy 480 Gen10 Compute Module | ||
| HPE Synergy 660 Gen10 Compute Module |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-7202?
CVE-2020-7202 has been classified as a high-severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2020-7202?
To fix CVE-2020-7202, users should update their HPE Integrated Lights-Out 5 (iLO 5) firmware to version 2.31 or later or upgrade their HPE Integrated Lights-Out 4 (iLO 4) firmware to version 2.76 or later.
What does CVE-2020-7202 affect?
CVE-2020-7202 affects HPE Integrated Lights-Out 5 and Integrated Lights-Out 4 firmware, potentially allowing unauthorized access to serial numbers and other sensitive information.
Can CVE-2020-7202 be exploited remotely?
Yes, CVE-2020-7202 can be exploited remotely, which poses a significant risk to affected systems.
What are the potential impacts of CVE-2020-7202?
The potential impacts of CVE-2020-7202 include unauthorized information disclosure, which could lead to further attacks or system misuse.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/hp
- canonical/hp integrated lights-out 4 firmware
- canonical/hewlett packard enterprise apollo 4200 gen9 server
- canonical/hp converged system cs700x
- canonical/hpe proliant bl420c gen8 server
- canonical/hpe proliant bl460c gen8 blade server
- canonical/hpe proliant bl460c gen9 server blade
- canonical/hp proliant bl465c gen8 (amd)
- canonical/hpe proliant bl660c gen8 blade server
- canonical/hpe proliant bl660c gen9 server blade
- canonical/hpe proliant dl120 gen9 server
- canonical/hpe proliant dl160 gen8 server
- canonical/hpe proliant dl160 gen9 server
- canonical/hp proliant dl180 gen9
- canonical/hpe proliant dl320e gen8 v2 server
- canonical/hp proliant dl320e gen8 server firmware
- canonical/hp proliant dl360 gen9
- canonical/hpe proliant dl360e gen8 server
- canonical/hp proliant dl360p gen8 server firmware
- canonical/hpe proliant dl380 gen9 server
- canonical/hp proliant dl380e gen8 server firmware
- canonical/hpe proliant dl380p gen8 server
- canonical/hp proliant dl385p gen8 (amd)
- canonical/hpe proliant dl560 gen8 server
- canonical/hp proliant dl560 gen9 server firmware
- canonical/hp proliant dl580 gen8 server firmware
- canonical/hpe proliant dl580 gen9 server
- canonical/hp proliant dl60 gen9 server
- canonical/hpe proliant dl80 gen9 server
- canonical/hpe proliant microserver gen8
- canonical/hp proliant ml110 gen9 server firmware
- canonical/hp proliant ml30 gen9
- canonical/hp proliant ml310e gen8 v2 server
- canonical/hpe proliant ml310e gen8 v2 server
- canonical/hp proliant ml350
- canonical/hpe proliant ml350e gen8 v2 server
- canonical/hp proliant ml350p gen8 server firmware
- canonical/hp proliant sl210t gen8 server firmware
- canonical/hpe proliant sl230s gen8 server
- canonical/hp proliant sl250s gen8 server firmware
- canonical/hpe proliant sl270s gen8 server
- canonical/hpe proliant sl270s gen8 server firmware
- canonical/hpe proliant sl4540 gen8 server
- canonical/hpe proliant ws460c gen8 graphics server blade
- canonical/hpe proliant ws460c gen9 graphics server blade
- canonical/hp proliant xl170r gen9 server firmware
- canonical/hp proliant xl190r gen9 server firmware
- canonical/hpe proliant xl220a gen8 v2 server
- canonical/hpe proliant xl230a gen9 server
- canonical/hpe proliant xl250a gen9 server
- canonical/hpe proliant xl450 gen9 server
- canonical/hpe proliant xl730f gen9 server
- canonical/hp proliant xl740f gen9
- canonical/hp proliant xl750f gen9
- canonical/hpe synergy 480 gen9 compute module
- canonical/hp integrated lights-out
- canonical/hpe apollo 4200 gen10 server
- canonical/hpe apollo 4510 gen10 system
- canonical/hpe apollo r2000 chassis
- canonical/hpe proliant bl460c gen10 server blade
- canonical/hp proliant dl120 gen10 firmware
- canonical/hpe proliant dl160 gen10 server
- canonical/hp proliant dl180 gen10
- canonical/hpe proliant dl20 gen10 server firmware
- canonical/hpe proliant dl325 gen10 plus server
- canonical/hpe proliant dl325 gen10 server
- canonical/hpe proliant dl360 gen10 server
- canonical/hpe proliant dl380 gen10 server
- canonical/hpe proliant dl385 gen10 plus server
- canonical/hp proliant dl385 gen10
- canonical/hp proliant dl560 gen10
- canonical/hp proliant dl580 gen10
- canonical/hpe proliant ml110 gen10 server
- canonical/hpe proliant ml30 gen10 server
- canonical/hp proliant xl170r gen10
- canonical/hpe proliant xl190r gen10 server
- canonical/hp proliant xl230k gen10 firmware
- canonical/hpe proliant xl270d gen10 server
- canonical/hpe proliant xl450 gen10 server
- canonical/hpe synergy 480 gen10 compute module
- canonical/hpe synergy 660 gen10 compute module