Summary
Intelligent Platform Management Interface is prone to an authentication- bypass vulnerability.
Impact
Attackers can exploit this issue to gain administrative access to the device and disclose sensitive information.
Solution
Ask the Vendor for an update.
Insight
The remote IPMI service accepted a session open request for cipher zero.
Detection
Send a request with a zero cipher and check if this request was accepted.
References
Updated on 2015-03-25
