ProLiant Servers - Netservers
1758332 Members
2205 Online
108868 Solutions
New Discussion

RIB\iLO vulnerability on port 80

 
BR838972
Advisor

RIB\iLO vulnerability on port 80

We have a problem with ALL our RIB's whether they are iLO or Lights-out II. our network team regularly executes a network scan for hosts which are not "secure" from a patch perspective. When the RIB's get queried, the Retine Scanner returns an NT4 Vulnerability on port 80 on the RIB. This is the best bit..... Once the RIB has been scanned, port 80 closes and the RIB cannot be used at all until 24 hours later (it resets iteslf) or we physically power off and unplug the server.

Does HP or anyone else know about this issue?

Also, is there a firmware fix for this?

I have attached the screen shot of the scan result.

When a scan is run on any VLAN or the whole network regardless of RIB type and firmware revision, any RIB on that VLAN\Network becomes unavailable to a port 80 ping.