PT-2014-4980 · Raritan · Raritan Px

Joerg Kost · Published 2014-07-14 · Updated 2014-07-15 · CVE-2014-2955

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Raritan PX versions prior to 1.5.11 on DPXR20A-16 devices

Description The issue allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 and an arbitrary password.

Recommendations For versions prior to 1.5.11, update to version 1.5.11 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-2955

Affected Products

Raritan Px

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2955 · Security Note
• http://seclists.org/fulldisclosure/2014/Jul/14 · Note
• http://kb.cert.org/vuls/id/712660 · Note