References https://nvd.nist.gov/vuln/detail/CVE-2017-12542 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03769en_us https://synacktiv.com/publications/rce-vulnerability-in-hp-ilo https://www.exploit-db.com/exploits/44005 https://github.com/skelsec/CVE-2017-12542 https://www.rapid7.com/db/vulnerabilities/hp-ilo-cve-2017-12542/ https://www.cve.org/CVERecord?id=CVE-2017-12542 https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf03769en_us https://www.bleepingcomputer.com/news/security/you-can-bypass-authentication-on-hpe-ilo4-servers-with-29-a-characters/ https://github.com/emadshanab/goby-poc/blob/main/HP-iLO4-Login-Authentication-Bypass-(CVE-2017-12542).json
Related VulnerabilitiesPoCCVE-2017-12542: HPE Integrated Lights-out 4 (ILO4) <2.53 - Authentication BypassHPIntegratedLights-Out4绕过身份验证漏洞(CVE-2017-12542)