Server Management - Remote Server Management
1819520 Members
3110 Online
109603 Solutions
New Discussion

is ilo4 or ilo5 vulnerable to CVE-2024-54085

 
SOLVED
Go to solution
erjimenez
Visitor

is ilo4 or ilo5 vulnerable to CVE-2024-54085

I've been trying to interpret CVE-2024-54085.  Is ilo4 or ilo5 vulnerable to this CVE?

# Reference:

https://nvd.nist.gov/vuln/detail/CVE-2024-54085

https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf

 

3 REPLIES 3
shiva_jr
HPE Pro
Solution

Re: is ilo4 or ilo5 vulnerable to CVE-2024-54085

Hi @erjimenez , 
As I can see in HPE documents, it affects on Cray BMC but not mentioned as the iLO is vulnerable.  Refer this document.

Regards,
Shiva_jr



I work at HPE
HPE Support Center offers support for your HPE services and products when and how you need it. Get started with HPE Support Center today.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
Accept or Kudo
erjimenez
Visitor

Re: is ilo4 or ilo5 vulnerable to CVE-2024-54085

Thank you @shiva_jr for confirming!

Sunitha_Mod
Moderator

Re: is ilo4 or ilo5 vulnerable to CVE-2024-54085

Hello @erjimenez,

We are delighted to hear your concern has been addressed. 



Thanks,
Sunitha G
I'm an HPE employee.
HPE Support Center offers support for your HPE services and products when and how you need it. Get started with HPE Support Center today.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
Accept or Kudo