CVE-2019-11983: HP Integrated Lights-Out 4 Firmware

High severity, CVSS 7.0. EPSS: 1.1% chance of exploitation in the next 30 days.

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

Affected products

• HP Integrated Lights-Out 4 Firmware: up to and including 2.61b
• HP Integrated Lights-Out 5 Firmware: up to and including 1.39

Published 2019-06-05. Last modified 2026-06-17.