Database/Firmware, BMC & network fabric
HPE iLO (IPMI cipher 0): IPMI authentication bypass via cipher suite 0 on the iLO BMC
CVSS 10.0CVE-2013-4784Firmware, BMC & network fabriccurated
Impact
IPMI authentication bypass via cipher suite 0 on the iLO BMC
Who can reach it
Network / IPMI
What to do
Config baseline change disabling cipher 0
References
Related entries
- Raritan PX rack PDU (before firmware 1.5.11, DPXR20A-16 and related PX models): The PDU's IPMI interface acceptsCVE-2014-2955 · Raritan PX rack PDU (before firmware 1.5.11, DPXR20A-16 and related PX models)Critical
- Supermicro BMC virtual media (H11/H12/M11/X9/X10/X11): Virtual media service uses weak/absent encryptionCVE-2019-16649 · Supermicro BMC virtual media (H11/H12/M11/X9/X10/X11)Critical
- Supermicro X10/X11 BMC (virtual media service): The BMC's virtual media service reuses socket file descriptors, soCVE-2019-16650 · Supermicro X10/X11 BMC (virtual media service)Critical
- Lanner IAC-AST2500A BMC standard firmware 1.10.0: Arbitrary code execution as root on the BMC, at the maximum severityCVE-2021-26728 · Lanner IAC-AST2500A BMC standard firmware 1.10.0Critical
- Lanner IAC-AST2500A BMC firmware 1.10.0: Root on the BMC without any credential at all, because the vulnerable handlerCVE-2021-26729 · Lanner IAC-AST2500A BMC firmware 1.10.0Critical
- OpenBMC phosphor-net-ipmid (IPMI 2.0 RMCP+ / IPMI over LAN): The headline OpenBMC bugCVE-2021-39296 · OpenBMC phosphor-net-ipmid (IPMI 2.0 RMCP+ / IPMI over LAN)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.