Unscored CVE-2014-2955 EUVD-2014-2977GHSA-7x69-82vj-v63v

Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by usin…

Published Jul 14, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

References

20140703 Raritan IPMI vulnerability mailing-list
VU#712660 third-party-advisory