CVE-2004-2600
Medium
Description
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
SeverityMedium
CVSS5.0
Exploit probability—
ProductIntel Server Configuration Wizard
PublishedDec 31, 2004
First seenDec 31, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel server_configuration_wizard | No range specified | — |
| intel cli_auto-configuration_utility | No range specified | — |
| intel client_system_setup_utility | No range specified | — |
| intel server_control | No range specified | — |
| intel system_setup_utility | No range specified | — |
| intel carrier_grade_server_tigpr2u | No range specified | — |
| intel carrier_grade_server_tsrlt2 | No range specified | — |
| intel carrier_grade_server_tsrmt2 | No range specified | — |
| hp carrier_grade_server_cc2300 | a6898a, a6899a | — |
| hp carrier_grade_server_cc3300 | a6900a, a6901a | — |
| hp carrier_grade_server_cc3310 | a9862a, a9863a | — |
| intel entry_server_board_se7210tp1-e | No range specified | — |
| intel entry_server_platform_sr1325tp1-e | No range specified | — |
| intel server_board_scb2 | No range specified | — |
| intel server_board_sds2 | No range specified | — |
| intel server_board_se7500wv2 | No range specified | — |
| intel server_board_se7501hg2 | No range specified | — |
| intel server_board_shg2 | No range specified | — |
| intel server_platform_spsh4 | No range specified | — |
| intel server_platform_sr870bh2 | No range specified | — |
| intel server_platform_sr870bn4 | No range specified | — |
| intel server_platform_srsh4 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.