IPMI Cipher Zero Authentication Bypass Vulnerability

  1. Network Vulnerabilities
  2. General
  3. IPMI Cipher Zero Authentication Bypass Vulnerability
Summary
Intelligent Platform Management Interface is prone to an authentication- bypass vulnerability.
Impact
Attackers can exploit this issue to gain administrative access to the device and disclose sensitive information.
Solution
Ask the Vendor for an update.
Insight
The remote IPMI service accepted a session open request for cipher zero.
Detection
Send a request with a zero cipher and check if this request was accepted.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities