CVE-2007-0661

Опубликовано: 01 фев. 2007

Источник: nvd

CVSS2: 5.4

EPSS Низкий

Описание

Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management Interface (IPMI) is enabled, allow remote attackers to connect and issue arbitrary IPMI commands, possibly triggering a denial of service.

Комментарий

The IPMI configuration does not appear to be the cause, but an extra condition for when it's possible. This is the reason for medium access complexity.

Ссылки

http://lz1.intel.com/psirt/advisory.aspx?intelid=INTEL-SA-00012&languageid=en-fr
Patch
Vendor Advisory
http://osvdb.org/33044
http://secunia.com/advisories/23989
Vendor Advisory
http://www.securityfocus.com/bid/22341
http://www.vupen.com/english/advisories/2007/0432
http://lz1.intel.com/psirt/advisory.aspx?intelid=INTEL-SA-00012&languageid=en-fr
Patch
Vendor Advisory
http://osvdb.org/33044
http://secunia.com/advisories/23989
Vendor Advisory
http://www.securityfocus.com/bid/22341
http://www.vupen.com/english/advisories/2007/0432

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:intel:enterprise_southbridge_2_bmc:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:enterprise_southbridge_bmc:*:*:oem:*:*:*:*:*

cpe:2.3:h:intel:server_board_s5000pal:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:server_board_s5000psl:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:server_board_s5000vcl:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:server_board_s5000vsa:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:server_board_s5000xal:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:server_board_s5000xvn:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:server_board_sc5400ra:*:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00458

Низкий

5.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5xjg-5mmc-43mv

github

почти 4 года назад