{"id":"CVE-2017-12542","published":"2018-02-15T22:00:00Z","modified":"2024-09-17T01:55:41Z","title":"A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to…","vendor":"Hewlett Packard Enterprise","product":"Integrated Lights-out 4 (iLO 4)","tier":"core","eol":null,"affectedVersions":[{"vendor":"Hewlett Packard Enterprise","product":"Integrated Lights-out 4 (iLO 4)","versions":["Prior to 2.53"]}],"description":{"text":"A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in Hewlett Packard Enterprise's Integrated Lights-out 4 (iLO 4) firmware, in versions prior to 2.53, enables both an authentication bypass and arbitrary code execution. The available record does not specify the attack vector, required privileges, user interaction, or configuration conditions, so those prerequisites cannot be confirmed from this data.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:17:59Z"},"cvss":null,"epss":{"score":0.99294,"percentile":0.99938,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-04-12","exploitedFirstSeen":"2021-04-12","ransomware":true,"evidence":[{"url":"https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/","date":"2021-04-12"},{"url":"https://info.securin.io/hubfs/Securin%20Ransomware%20Report%202023.pdf","date":"2023-02-14"},{"url":"https://www.horizon3.ai/wp-content/uploads/2024/03/Proactive_Cybersecurity_Unleashed.pdf","date":"2024-03-22"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-06-30&host_type=src&vulnerability=cve-2017-12542","date":"2026-06-30"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-07-01&host_type=src&vulnerability=cve-2017-12542","date":"2026-07-01"}],"evidenceTotal":5,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/100467","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1039222","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://www.exploit-db.com/exploits/44005/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-4114","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4114","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":44005,"url":"https://www.exploit-db.com/exploits/44005","title":"HPE iLO 4 < 2.53 - Add New Administrator User","type":"remote","platform":"multiple","date":"2018-02-05","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-02-05"},"pocGithub":{"count":4,"skipped":0,"earliest":"2018-02-05","earliestUrl":"https://github.com/skelsec/CVE-2017-12542","repos":[{"name":"skelsec/CVE-2017-12542","url":"https://github.com/skelsec/CVE-2017-12542","stars":90,"created":"2018-02-05"},{"name":"sk1dish/ilo4-rce-vuln-scanner","url":"https://github.com/sk1dish/ilo4-rce-vuln-scanner","stars":5,"created":"2019-08-16"},{"name":"VijayShankar22/CVE-2017-12542","url":"https://github.com/VijayShankar22/CVE-2017-12542","stars":0,"created":"2025-10-13"},{"name":"Gill-Singh-A/CVE-2017-12542-Exploit","url":"https://github.com/Gill-Singh-A/CVE-2017-12542-Exploit","stars":0,"created":"2026-02-09"}]},"metasploit":[{"name":"HP iLO 4 1.00-2.50 Authentication Bypass Administrator Account Creation","module":"auxiliary/admin/hp/hp_ilo_create_admin_account","type":"auxiliary","disclosureDate":"2017-08-24","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/hp/hp_ilo_create_admin_account.rb"}],"nuclei":[{"id":"CVE-2017-12542","name":"HPE Integrated Lights-out 4 (ILO4) <2.53 - Authentication Bypass","severity":"critical","path":"http/cves/2017/CVE-2017-12542.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12542.yaml"}],"first":{"date":"2017-08-24","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/hp/hp_ilo_create_admin_account.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/44005/"],"flow":[],"timeline":[{"date":"2017-08-24","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2018-02-05, PoC-in-GitHub 2018-02-05","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/hp/hp_ilo_create_admin_account.rb","provenance":"source"},{"date":"2018-02-15","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-12542","provenance":"source"},{"date":"2021-04-12","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":70.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2026 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.99,"detail":"percentile 0.9994"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 4 PoC-in-GitHub repos; 1 Metasploit module; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}