CVE-2018-7078

A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30.

• http://www.securitytracker.com/id/1041188Third Party Advisory, VDB Entry
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03844en_usVendor Advisory
• http://www.securitytracker.com/id/1041188Third Party Advisory, VDB Entry
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03844en_usVendor Advisory

Published

Aug 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7072A remote bypass of security restrictions vulnerability was i…
• CVE-2018-7073A local arbitrary file modification vulnerability was identi…
• CVE-2018-7074A remote code execution vulnerability was identified in HPE …
• CVE-2018-7075A remote cross-site scripting (XSS) vulnerability was identi…
• CVE-2018-7076A remote code execution vulnerability was identified in HPE …
• CVE-2018-7077A security vulnerability in HPE XP P9000 Command View Advanc…
• CVE-2018-7079Aruba ClearPass Policy Manager guest authorization failure. …
• CVE-2018-7080A vulnerability exists in the firmware of embedded BLE radio…
• CVE-2018-7081A remote code execution vulnerability is present in network-…9.8
• CVE-2018-7082A command injection vulnerability is present in Aruba Instan…7.2
• CVE-2018-7083If a process running within Aruba Instant crashes, it may le…
• CVE-2018-7084A command injection vulnerability is present that permits an…9.8