PT-2014-4980 · Raritan · Raritan Px

Joerg Kost · Publicado 2014-07-14 · Atualizado 2014-07-15 · CVE-2014-2955

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Raritan PX versions prior to 1.5.11 on DPXR20A-16 devices

Description The issue allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 and an arbitrary password.

Recommendations For versions prior to 1.5.11, update to version 1.5.11 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-2955

Produtos afetados

Raritan Px

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2955 · Nota de Segurança
• http://seclists.org/fulldisclosure/2014/Jul/14 · Nota
• http://kb.cert.org/vuls/id/712660 · Nota