{
  "port": 17988,
  "protocol": "tcp",
  "service": "HPE iLO Virtual Media",
  "oneLiner": "The default Virtual Media port on HPE iLO baseboard management controllers — a reliable way to spot a ProLiant's management processor.",
  "whatItIs": "HPE's Integrated Lights-Out management processor exposes Virtual Media on TCP 17988 by default, alongside KVMIP on 17990 and HTTPS on 443; the linked Redfish emulator's NetworkProtocol mockup carries the same VirtualMedia port. Administrators have long scanned for 17988 to inventory iLOs on a subnet. The port is unassigned at IANA — the number is HPE's convention, changeable in the iLO settings.",
  "exposure": {
    "verdict": "never",
    "note": "A BMC is a second computer with full control of the first: virtual media can boot arbitrary images. iLO belongs on an isolated management network, and an internet-reachable 17988 is a finding, not a configuration."
  },
  "checkCommand": "nc -vz -w 3 TARGET 17988",
  "links": [
    {
      "title": "HPE iLO Redfish emulator — NetworkProtocol mockup (VirtualMedia port 17988)",
      "url": "https://github.com/HewlettPackard/ilo-redfish-emulator",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}