HPE Integrated Lights-out 4 (iLO 4) Multiple Remote Vulnerabilities

[jensmander]

Hi @ all.

 

Because many users have a MicroServer running XPE please read the security bulletin from HP:

 

http://h20565.www2.hpe.com/hpsc/doc/public/display?docId=hpesbhf03769en_us

 

An update to V2.54 is recommended.

 

Cheers

[huxmut]

thanks for the heads up

[bearcat]

Another heads up in regards to this ... 

 

http://pingtool.org/latest-hp-ilo-firmwares/

 

Quote

 Please be aware that this version does a callback with HPE to check your ILO advanced key. If you ‘borrowed’ your key from somewhere else, your key might be stripped and the ilo will be reset to factory defaults. All ILO usernames will be removed and the Administrator account will be reset to its defaults too.

 

[haldi]

didnt happen to me -.o

lucky me.

[huxmut]

On 10/31/2017 at 4:37 PM, bearcat said:

Another heads up in regards to this ... 

 

http://pingtool.org/latest-hp-ilo-firmwares/

 

 

 

I paid AUD $27 for my key. I hope it's legitimate. I wonder how you can find out ?

[bearcat]

@huxmut:

That sounds like a "too good to be true" price, if you compare withe the prices given here.

https://marketplace.hpe.com/category?catId=18964&reqCatId=332279&catlevelmulti=18964_72366_5293333_332279&country=US&locale=en

Where did you buy your key, and how many years are your license valid?

 

 

 

Edit:

2.55 is out now.

 

Edited November 14, 2017 by bearcat

[huxmut]

Sorry for the late reply. Bought from eBay .au no expiry date that i was aware of.

It is however an older iLo4 key. Apparently they were discontinued and thats why it was cheap.

 

So the seller said ....