HP iLO Authentication Bypass (CVE-2017-12542)

This repository contains a proof-of-concept exploit for CVE-2017-12542, an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out (iLO) firmware.

The vulnerability allows unauthenticated access to the iLO REST API, which can be abused to enumerate accounts and, in vulnerable configurations, create a new administrative user.

Vulnerability Overview

• CVE: CVE-2017-12542

• Affected Product: HP iLO (multiple generations)

• Impact:

  • Authentication bypass
  • Unauthorized account enumeration
  • Potential creation of administrative users

• Attack Vector: Network (HTTP/HTTPS)

• Privileges Required: None (unauthenticated)

This issue was caused by improper handling of malformed HTTP headers in the iLO REST API.

Requirements

• Python 3.x
• requests
• colorama

Install dependencies:

pip install -r requirements.txt

Usage

This tool supports two primary modes:

• Vulnerability check ('-c', "--check") Determines whether the target iLO endpoint is affected by CVE-2017-12542.

• Account creation attempt Attempts to create a new administrative user on a vulnerable system.

References

• NVD: CVE-2017-12542
• HP Security Advisory for iLO
• Redfish / iLO REST API documentation