CVE-2007-2387 in Xserve Lights-Out Management

Summary

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 04/30/2007
• Disclosure: 06/04/2007
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 9.8
• EPSS: 0.03402
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2387
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2387
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2387/