CVE-2017-8979 describes critical security vulnerabilities in HPE Integrated Lights-Out 2 (iLO 2) firmware, affecting both the firmware and the integrated_lights-out product. With a CVSS v3 score of 9.8 (Critical), this vulnerability allows unauthenticated remote attackers to achieve authentication bypass, arbitrary code execution, and denial of service. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.29CPE matchmatch criteria | cpe:2.3:o:hp:integrated_lights-out_2_firmware:2.29:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.