Database/Firmware, BMC & network fabric
Dell iDRAC (IPMI 1.5 cipher 0): Remote authentication bypass via cipher suite 0
CVSS 10.0CVE-2013-4783Firmware, BMC & network fabriccurated
Impact
Remote authentication bypass via cipher suite 0
Who can reach it
Network / IPMI
What to do
Disable cipher 0 in the iDRAC config baseline
References
Related entries
- HPE iLO (IPMI cipher 0): IPMI authentication bypass via cipher suite 0 on the iLO BMCCVE-2013-4784 · HPE iLO (IPMI cipher 0)Critical
- Raritan PX rack PDU (before firmware 1.5.11, DPXR20A-16 and related PX models): The PDU's IPMI interface acceptsCVE-2014-2955 · Raritan PX rack PDU (before firmware 1.5.11, DPXR20A-16 and related PX models)Critical
- Supermicro BMC virtual media (H11/H12/M11/X9/X10/X11): Virtual media service uses weak/absent encryptionCVE-2019-16649 · Supermicro BMC virtual media (H11/H12/M11/X9/X10/X11)Critical
- Supermicro X10/X11 BMC (virtual media service): The BMC's virtual media service reuses socket file descriptors, soCVE-2019-16650 · Supermicro X10/X11 BMC (virtual media service)Critical
- Lanner IAC-AST2500A BMC standard firmware 1.10.0: Arbitrary code execution as root on the BMC, at the maximum severityCVE-2021-26728 · Lanner IAC-AST2500A BMC standard firmware 1.10.0Critical
- Lanner IAC-AST2500A BMC firmware 1.10.0: Root on the BMC without any credential at all, because the vulnerable handlerCVE-2021-26729 · Lanner IAC-AST2500A BMC firmware 1.10.0Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.