CVE-2004-2600

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-12-31 CVE Published
2005-11-29 CVE Reserved
2024-08-08 CVE Updated
2024-11-05 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source
http://support.intel.com/support/motherboards/server/sb/CS-010422.htm	X_refsource_misc
http://www.osvdb.org/4978	Vdb Entry
http://www.securityfocus.com/bid/10068	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15775	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/11315	2017-07-11

URL	Date	SRC
ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf	2017-07-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Intel Search vendor "Intel"		Cli Auto-configuration Utility Search vendor "Intel" for product "Cli Auto-configuration Utility"				*		-		Affected
Intel Search vendor "Intel"		Client System Setup Utility Search vendor "Intel" for product "Client System Setup Utility"				*		-		Affected
Intel Search vendor "Intel"		Server Configuration Wizard Search vendor "Intel" for product "Server Configuration Wizard"				*		-		Affected
Intel Search vendor "Intel"		Server Control Search vendor "Intel" for product "Server Control"				*		-		Affected
Intel Search vendor "Intel"		System Setup Utility Search vendor "Intel" for product "System Setup Utility"				*		-		Affected
Intel Search vendor "Intel"		Carrier Grade Server Tigpr2u Search vendor "Intel" for product "Carrier Grade Server Tigpr2u"				*		-		Affected
Intel Search vendor "Intel"		Carrier Grade Server Tsrlt2 Search vendor "Intel" for product "Carrier Grade Server Tsrlt2"				*		-		Affected
Intel Search vendor "Intel"		Carrier Grade Server Tsrmt2 Search vendor "Intel" for product "Carrier Grade Server Tsrmt2"				*		-		Affected
Hp Search vendor "Hp"		Carrier Grade Server Cc2300 Search vendor "Hp" for product "Carrier Grade Server Cc2300"				a6898a Search vendor "Hp" for product "Carrier Grade Server Cc2300" and version "a6898a"		-		Affected
Hp Search vendor "Hp"		Carrier Grade Server Cc2300 Search vendor "Hp" for product "Carrier Grade Server Cc2300"				a6899a Search vendor "Hp" for product "Carrier Grade Server Cc2300" and version "a6899a"		-		Affected
Hp Search vendor "Hp"		Carrier Grade Server Cc3300 Search vendor "Hp" for product "Carrier Grade Server Cc3300"				a6900a Search vendor "Hp" for product "Carrier Grade Server Cc3300" and version "a6900a"		-		Affected
Hp Search vendor "Hp"		Carrier Grade Server Cc3300 Search vendor "Hp" for product "Carrier Grade Server Cc3300"				a6901a Search vendor "Hp" for product "Carrier Grade Server Cc3300" and version "a6901a"		-		Affected
Hp Search vendor "Hp"		Carrier Grade Server Cc3310 Search vendor "Hp" for product "Carrier Grade Server Cc3310"				a9862a Search vendor "Hp" for product "Carrier Grade Server Cc3310" and version "a9862a"		-		Affected
Hp Search vendor "Hp"		Carrier Grade Server Cc3310 Search vendor "Hp" for product "Carrier Grade Server Cc3310"				a9863a Search vendor "Hp" for product "Carrier Grade Server Cc3310" and version "a9863a"		-		Affected
Intel Search vendor "Intel"		Entry Server Board Se7210tp1-e Search vendor "Intel" for product "Entry Server Board Se7210tp1-e"				*		-		Affected
Intel Search vendor "Intel"		Entry Server Platform Sr1325tp1-e Search vendor "Intel" for product "Entry Server Platform Sr1325tp1-e"				*		-		Affected
Intel Search vendor "Intel"		Server Board Scb2 Search vendor "Intel" for product "Server Board Scb2"				*		-		Affected
Intel Search vendor "Intel"		Server Board Sds2 Search vendor "Intel" for product "Server Board Sds2"				*		-		Affected
Intel Search vendor "Intel"		Server Board Se7500wv2 Search vendor "Intel" for product "Server Board Se7500wv2"				*		-		Affected
Intel Search vendor "Intel"		Server Board Se7501hg2 Search vendor "Intel" for product "Server Board Se7501hg2"				*		-		Affected
Intel Search vendor "Intel"		Server Board Shg2 Search vendor "Intel" for product "Server Board Shg2"				*		-		Affected
Intel Search vendor "Intel"		Server Platform Spsh4 Search vendor "Intel" for product "Server Platform Spsh4"				*		-		Affected
Intel Search vendor "Intel"		Server Platform Sr870bh2 Search vendor "Intel" for product "Server Platform Sr870bh2"				*		-		Affected
Intel Search vendor "Intel"		Server Platform Sr870bn4 Search vendor "Intel" for product "Server Platform Sr870bn4"				*		-		Affected
Intel Search vendor "Intel"		Server Platform Srsh4 Search vendor "Intel" for product "Server Platform Srsh4"				*		-		Affected