CVE-2015-2106 Auth bypass in n/a
Remote attackers can bypass access restrictions or cause denial of service in HP Integrated Lights-Out firmware.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-2106?
CVE-2015-2106 is a medium-severity authentication bypass vulnerability in n/a, published on 31 Mar 2015. It can be exploited over the network, with no action from the victim.
Official description
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors.
Which versions are affected by CVE-2015-2106?
It affects 3 products.
Products include Hp Integrated Lights-Out 2 Firmware, Hp Integrated Lights-Out 3 Firmware, Hp Integrated Lights-Out 4 Firmware.
How do I fix CVE-2015-2106?
No fix has been published for CVE-2015-2106 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2015-2106 being exploited?
There is no known exploitation of CVE-2015-2106 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2014-7876 Privilege escalation in n/a
- CVE-2017-8979 Auth bypass in Integrated Lights-Out 2 (iLO 2)
- CVE-2014-2601 Denial of service in n/a
- CVE-2017-12543 Information disclosure in Integrated Lights-Out 4
- CVE-2018-7112 Information disclosure in Windows firmware installer for Gen9, Gen8, G7,and G6 HPE servers
Sources
Also known as GHSA-3qxh-5whp-mmfg.