Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

HP iLO-2 on listed servers can be crashed remotely

CVE-2008-0711 · published 18 years ago
Summary

The iLO-2 management interface built into HP Integrity servers (rx2660, rx3600, rx6600) and the bl860c blade can be forced to stop working by an attacker from outside the network. This would make the servers unreachable for management until the hardware is reset. Apply the latest HP firmware updates and restrict network access to the iLO interface.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
hp bl860c All versions
cpe:2.3:h:hp:bl860c:*:*:*:*:*:*:*:*
hp rx2660 All versions
cpe:2.3:h:hp:rx2660:*:*:*:*:*:*:*:*
hp rx3600 All versions
cpe:2.3:h:hp:rx3600:*:*:*:*:*:*:*:*
hp rx6600 All versions
cpe:2.3:h:hp:rx6600:*:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP), as used in Integrity Servers rx2660, rx3600, and rx6600, and Integrity Blade Server model ...
Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP), as used in Integrity Servers rx2660, rx3600, and rx6600, and Integrity Blade Server model bl860c, allows remote attackers to cause a denial of service via unknown vectors.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
3% chance of attack within 30 days
Timeline
Published8 Apr 2008
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-0711 · NVD
Track software like this
Free during beta