HP has acknowledged multiple vulnerabilities in HP Integrated Lights-Out, which can be exploited by malicious people to bypass certain security restrictions and manipulate certain data.

For more information:
SA37291
SA42473

The vulnerabilities are reported in HP Integrated Lights-Out 2 (iLO2) version 2.05 and prior and HP Integrated Lights-Out 3 (iLO3) version 1.16 and prior.

Solution
Update to version 1.20 or 2.06.
Original Advisory
HPSBHF02706 SSRT100613:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03024266

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area