CVE-2020-7202

MEDIUM

5.3

CVSS Score

Published: January 5, 2021 at 02:08 PM UTC

Updated: June 17, 2026 at 03:24 AM UTC

83 products affected across 1 vendorIntegrated Lights Out 4Integrated Lights Out 5Proliant Dl160 Gen10 Server

Using HPE ProLiant Servers, Apollo Products, Converged Systems, and Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5), or Integrated Lights-Out 4 (iLO 4) by N/A?

Get instant alerts when new vulnerabilities affect HPE ProLiant Servers, Apollo Products, Converged Systems, and Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5), or Integrated Lights-Out 4 (iLO 4) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 1%

Description

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Integrated Lights Out 4 · HP

95%

v < 2.76Prior to iLO 4 v2.76 Prior to iLO 5 v2.31

Affected range stops below 2.76, so it looks safe — our inference, not a vendor statement

hp-apollo-4200-gen9-server (environment) · hp-convergedsystem-cs700 (environment) · hp-convergedsystem-cs700x (environment) · hp-proliant-bl420c-gen8-server (environment) · hp-proliant-bl460c-gen8-server-blade (environment) · hp-proliant-bl460c-gen9-server-blade (environment) · hp-proliant-bl465c-gen8-server-blade (environment) · hp-proliant-bl660c-gen8-server-blade (environment) · hp-proliant-bl660c-gen9-server (environment) · hp-proliant-dl120-gen9-server (environment) · hp-proliant-dl160-gen8-server (environment) · hp-proliant-dl160-gen9-server (environment) · hp-proliant-dl180-gen9-server (environment) · hp-proliant-dl320e-gen8-server (environment) · hp-proliant-dl320e-gen8-v2-server (environment) · hp-proliant-dl360-gen9-server (environment) · hp-proliant-dl360e-gen8-server (environment) · hp-proliant-dl360p-gen8-server (environment) · hp-proliant-dl380-gen9-server (environment) · hp-proliant-dl380e-gen8-server (environment) · hp-proliant-dl380p-gen8-server (environment) · hp-proliant-dl385p-gen8-amd (environment) · hp-proliant-dl560-gen8-server (environment) · hp-proliant-dl560-gen9-server (environment) · hp-proliant-dl580-gen8-server (environment) · hp-proliant-dl580-gen9-server (environment) · hp-proliant-dl60-gen9-server (environment) · hp-proliant-dl80-gen9-server (environment) · hp-proliant-microserver-gen8 (environment) · hp-proliant-ml110-gen9-server (environment) · hp-proliant-ml30-gen9-server (environment) · hp-proliant-ml310e-gen8-server (environment) · hp-proliant-ml310e-gen8-v2-server (environment) · hp-proliant-ml350-gen9-server (environment) · hp-proliant-ml350e-gen8-server (environment) · hp-proliant-ml350e-gen8-v2-server (environment) · hp-proliant-ml350p-gen8-server (environment) · hp-proliant-sl210t-gen8-server (environment) · hp-proliant-sl230s-gen8-server (environment) · hp-proliant-sl250s-gen8-server (environment) · hp-proliant-sl270s-gen8-se-server (environment) · hp-proliant-sl270s-gen8-server (environment) · hp-proliant-sl4540-gen8-3-node-server (environment) · hp-proliant-ws460c-gen8-graphics-server-blade (environment) · hp-proliant-ws460c-gen9-graphics-server-blade (environment) · hp-proliant-xl170r-gen9-server (environment) · hp-proliant-xl190r-gen9-server (environment) · hp-proliant-xl220a-gen8-v2-server (environment) · hp-proliant-xl230a-gen9-server (environment) · hp-proliant-xl250a-gen9-server (environment) · hp-proliant-xl450-gen9-server (environment) · hp-proliant-xl730f-gen9-server (environment) · hp-proliant-xl740f-gen9-server (environment) · hp-proliant-xl750f-gen9-server (environment) · hp-synergy-480-gen9-compute-module (environment)

Integrated Lights Out 5 · HP

95%

v < 2.31Prior to iLO 4 v2.76 Prior to iLO 5 v2.31

Affected range stops below 2.31, so it looks safe — our inference, not a vendor statement

hp-apollo-4200-gen10-server (environment) · hp-apollo-4510-system (environment) · hp-apollo-r2000-chassis (environment) · hp-convergedsystem-cs700 (environment) · hp-convergedsystem-cs700x (environment) · hp-proliant-bl460c-gen10-server-blade (environment) · hp-proliant-dl120-gen10-server (environment) · hp-proliant-dl160-gen10-server (environment) · hp-proliant-dl180-gen10-server (environment) · hp-proliant-dl20-gen10-server (environment) · hp-proliant-dl325-gen10-plus-server (environment) · hp-proliant-dl325-gen10-server (environment) · hp-proliant-dl360-gen10-server (environment) · hp-proliant-dl380-gen10-server (environment) · hp-proliant-dl385-gen10-plus-server (environment) · hp-proliant-dl385-gen10-server (environment) · hp-proliant-dl560-gen10-server (environment) · hp-proliant-dl580-gen10-server (environment) · hp-proliant-ml110-gen10-server (environment) · hp-proliant-ml30-gen10-server (environment) · hp-proliant-ml350-gen10-server (environment) · hp-proliant-xl170r-gen10-server (environment) · hp-proliant-xl190r-gen10-server (environment) · hp-proliant-xl230k-gen10-server (environment) · hp-proliant-xl270d-gen10-server (environment) · hp-proliant-xl450-gen10-server (environment) · hp-synergy-480-gen10-compute-module (environment) · hp-synergy-660-gen10-compute-module (environment)

Apollo 4200 Gen10 Server · HPdevice

80%

All versions

Apollo 4200 Gen9 Server · HPdevice

80%

All versions

Apollo 4510 System · HPdevice

80%

All versions

Apollo R2000 Chassis · HPdevice

80%

All versions