This Metasploit module exploits an authentication bypass in HP iLO 4 1.00 to 2.50, triggered by a buffer overflow in the Connection HTTP header handling by the web server. Exploiting this vulnerability gives full access to the REST API, allowing arbitrary accounts creation.
307468ecf285c6317f2e172728ad61a604fe9d31aa424fe525723ac69384bc9e
HPE iLO4 versions prior to 2.54 add new administrator user exploit.
350446ace84a527655160a8fc8584b4707b9244e7bb4214a39fcb0b688a8239e
HPE Security Bulletin HPESBHF03769 1 - A potential security vulnerability has been identified in HPE Integrated Lights-out (iLO 4). The vulnerability could be exploited remotely to allow authentication bypass and execution of code. Revision 1 of this advisory.
55e502bbbda3b626b9c1e5d89f1185c6db3ed04eb47bc7d55058c15b071a11c7