Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-2600

The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.

Published

2004-12-31T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application intel cli_auto-configuration_utility * Yes
Application intel client_system_setup_utility * Yes
Application intel server_configuration_wizard * Yes
Application intel server_control * Yes
Application intel system_setup_utility * Yes
Hardware intel carrier_grade_server_tigpr2u * Yes
Hardware intel carrier_grade_server_tsrlt2 * Yes
Hardware intel carrier_grade_server_tsrmt2 * Yes
Hardware hp carrier_grade_server_cc2300 a6898a Yes
Hardware hp carrier_grade_server_cc2300 a6899a Yes
Hardware hp carrier_grade_server_cc3300 a6900a Yes
Hardware hp carrier_grade_server_cc3300 a6901a Yes
Hardware hp carrier_grade_server_cc3310 a9862a Yes
Hardware hp carrier_grade_server_cc3310 a9863a Yes
Hardware intel entry_server_board_se7210tp1-e * Yes
Hardware intel entry_server_platform_sr1325tp1-e * Yes
Hardware intel server_board_scb2 * Yes
Hardware intel server_board_sds2 * Yes
Hardware intel server_board_se7500wv2 * Yes
Hardware intel server_board_se7501hg2 * Yes
Hardware intel server_board_shg2 * Yes
Hardware intel server_platform_spsh4 * Yes
Hardware intel server_platform_sr870bh2 * Yes
Hardware intel server_platform_sr870bn4 * Yes
Hardware intel server_platform_srsh4 * Yes
References