CVE-2017-12542
Hp Integrated Lights-Out 4 Firmware ≤ 2.53
Public PoCHigh EPSS
CVSS Score v3
10.0
Click a component to see what it means
Raw vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.99
99.9th percentile
Summary
CVE-2017-12542 is a critical-severity an unspecified weakness vulnerability in Hp Integrated Lights-Out 4 Firmware. Its CVSS base score is 10.0 (Critical).
Operationally, ranked in the top 0.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2017-4114
Vulnerability Data
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.
- CWE(s)
Related Threats
Likely ATT&CK TechniquesAI
Techniques this vulnerability likely enables, inferred from its description, weakness type, and attributed-actor tradecraft. Confidence is per-technique.
T1190 Exploit Public-Facing Application Initial Accessconfidence: HIGH
The vulnerability is an authentication bypass in a remote management interface (iLO), directly enabling exploitation of a public-facing application.
T1059 Command and Scripting Interpreter Executionconfidence: HIGH
Successful exploitation results in remote code execution on the iLO management processor.
T1078 Valid Accounts Stealthconfidence: MEDIUM
Bypassing authentication allows access using the compromised management interface without valid credentials.
inferred from description · MITRE ATT&CK Enterprise v19.0
CVEs Like This One
CVE-2025-10578Same vendor: Hp
CVE-2023-22782Same vendor: Hp
CVE-2017-5816Same vendor: Hp
CVE-2005-2773Same vendor: Hp
CVE-2023-28089Same vendor: Hp
CVE-2026-1996Same vendor: Hp
CVE-2016-2004Same vendor: Hp
CVE-2025-1697Same vendor: Hp
CVE-2025-43485Same vendor: Hp
CVE-2025-43019Same vendor: Hp
Affected Assets
hp
integrated lights-out 4 firmware
≤ 2.53
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.