CVE-2018-7105

Name: CVE-2018-7105
Creator: NVD / NIST
Published: 2018-09-27T18:29:00.8+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.11%

Last modified Jun 17, 2026

CVE-2018-7105 is a vulnerability of currently unknown severity. A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.. EPSS estimates a 4.11% chance of exploitation in the next 30 days.

Description

A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.

Metrics

EPSS Probability

4.11%

89.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Hp	Integrated Lights-Out 5 Firmware	< 1.35
Hp	Integrated Lights-Out 3 Firmware	< 1.90
Hp	Integrated Lights-Out 4 Firmware	< 2.61

References

http://www.securityfocus.com/bid/105425Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041649Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03866en_usMitigation, Vendor Advisory
http://www.securityfocus.com/bid/105425Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041649Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03866en_usMitigation, Vendor Advisory

Timeline

Published: Sep 27, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-7105?

How severe is CVE-2018-7105?

Severity scoring for CVE-2018-7105 is pending analysis. The EPSS model estimates a 4.11% probability of exploitation in the next 30 days.

How do I fix CVE-2018-7105?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-7105?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST