Vulnerability in Hp Carrier Grade Server Cc2300
CVE-2004-2600
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.
Affected products
- Hp Carrier_grade_server_cc2300 — versions a6898a, a6899a
- Hp Carrier_grade_server_cc3300 — versions a6900a, a6901a
- Hp Carrier_grade_server_cc3310 — versions a9862a, a9863a
- Intel Carrier_grade_server_tigpr2u
- Intel Carrier_grade_server_tsrlt2
- Intel Carrier_grade_server_tsrmt2
- Intel Cli_auto-configuration_utility
- Intel Client_system_setup_utility
- Intel Entry_server_board_se7210tp1-e
- Intel Entry_server_platform_sr1325tp1-e
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)