HP Integrated Lights-Out (iLO) Default Credentials

critical Nessus Plugin ID 72877

Synopsis

A web application is protected using default administrative credentials.

Description

The remote HP Integrated Lights-Out (iLO) install uses a default set of credentials ('Admin' / 'Admin' or 'Oper' / 'Oper') to control access to its management interface.

With this information, an attacker can gain access to the application.

Solution

Log into the application and change the default login credentials.

Plugin Details

Severity: Critical

ID: 72877

File Name: ilo_web_default_creds.nasl

Version: 1.4

Type: remote

Family: CGI abuses

Published: 3/7/2014

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:hp:integrated_lights-out

Required KB Items: www/ilo

Excluded KB Items: global_settings/supplied_logins_only