CVE-2012-3271: Unspecified vulnerability on the HP Integrated Lights-Out 3 (aka iLO3) with firmware before 1.50 and Integr...

Security readout for executives and security teams

HP iLO is out-of-band server management. This CVE reports that older iLO3 and iLO4 firmware could let a remote attacker obtain sensitive information. The public details do not explain the data exposed or attack path, so business risk depends on whether affected iLO interfaces exist and are reachable. Exposure is most likely where legacy HP iLO3 or iLO4 management interfaces remain on networks, especially if reachable from untrusted segments. Environments without these firmware versions are not indicated as affected by the supplied sources. Prioritize discovery and firmware verification for legacy HP server management interfaces. Because the issue concerns possible sensitive information exposure on privileged management hardware, unresolved internet or broad internal exposure should be treated as higher urgency despite incomplete public severity data. Mitigation focus: Inventory HP iLO3 and iLO4 controllers across server fleets.; Update iLO3 firmware to 1.50 or later where applicable.; Update iLO4 firmware to 1.13 or later where applicable..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.