CVE-2014-7876 Privilege escalation in n/a
Remote attackers can gain privileges, execute arbitrary code, or cause denial of service in HP iLO firmware via unspecified vectors.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-7876?
CVE-2014-7876 is a critical vulnerability in n/a, published on 31 Mar 2015. It can be exploited over the network, with no action from the victim.
Official description
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors.
Which versions are affected by CVE-2014-7876?
It affects 3 products.
Products include Hp Integrated Lights-Out 2 Firmware, Hp Integrated Lights-Out 4 Firmware, Hp Integrated Lights-Out Chassis Management Firmware.
How do I fix CVE-2014-7876?
No fix has been published for CVE-2014-7876 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-7876 being exploited?
There is no known exploitation of CVE-2014-7876 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-8979 Auth bypass in Integrated Lights-Out 2 (iLO 2)
- CVE-2014-2601 Denial of service in n/a
- CVE-2017-12543 Information disclosure in Integrated Lights-Out 4
- CVE-2015-2106 Auth bypass in n/a
- CVE-2018-7112 Information disclosure in Windows firmware installer for Gen9, Gen8, G7,and G6 HPE servers
Sources
Also known as GHSA-x8p2-gcrm-w762.