Authentication flaw

2014-07-1421:55:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.9%

JSON

Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

CPENameOperatorVersion
pxle1.5.8
pxeq1.0
pxeq1.0.4
pxeq1.1
pxeq1.1.6
pxeq1.2
pxeq1.2.5
pxeq1.2.7
pxeq1.3
pxeq1.3.1

Name	Operator	Version
px	le	1.5.8
px	eq	1.0
px	eq	1.0.4
px	eq	1.1
px	eq	1.1.6
px	eq	1.2
px	eq	1.2.5
px	eq	1.2.7
px	eq	1.3
px	eq	1.3.1

Rows per page:

1-10 of 151

References

seclists.org/fulldisclosure/2014/Jul/14

www.kb.cert.org/vuls/id/712660