PT-2013-5191 · Hewlett Packard · Hp Integrated Lights-Out

Dan Farmer · Publicado 2013-07-08 · Atualizado 2017-08-29 · CVE-2013-4784

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Integrated Lights-Out (iLO) (affected versions not specified)

Description The issue allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 and an arbitrary password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-4784

Produtos afetados

Hp Integrated Lights-Out

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/85569 · Nota
• http://osvdb.org/show/osvdb/93040 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4784 · Nota de Segurança
• https://lists.gnu.org/archive/html/freeipmi-devel/2013-02/msg00013.html · Nota
• http://oracle.com/technetwork/topics/security/cpujan2015-1972971.html · Nota
• http://wired.com/threatlevel/2013/07/ipmi · Nota
• http://metasploit.com/modules/auxiliary/scanner/ipmi/ipmi_cipher_zero · Nota
• http://fish2.com/ipmi/cipherzero.html · Nota