CVE-2018-7078: HP Integrated Lights-Out 4 Firmware

High severity, CVSS 7.2. EPSS: 6.8% chance of exploitation in the next 30 days.

A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30.

Affected products

• HP Integrated Lights-Out 4 Firmware: before 2.60 (fixed in 2.60)
• HP Integrated Lights-Out 5 Firmware: before 1.30 (fixed in 1.30)

Published 2018-08-06. Last modified 2026-06-17.