CVE-2007-2387

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0260%

EPSS Percentile43.40th

PublishedJun 4, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.

Affected Platforms (CPE)

📦

Apple

Xserve Lights Out Management

= firmware_0

References & Advisories

🔗 http://docs.info.apple.com/article.html?artnum=305571

🔗 http://lists.apple.com/archives/security-announce/2007/May/msg00006.html

🔗 http://osvdb.org/36128

🔗 http://secunia.com/advisories/25499

🔗 http://www.apple.com/support/downloads/xservelightsoutmanagementfirmwareupdate10.html

🔗 http://www.securityfocus.com/bid/24257

🔗 http://www.securitytracker.com/id?1018181

🔗 http://www.vupen.com/english/advisories/2007/2014

Vulnerability Description

Affected Platforms (CPE)

Xserve Lights Out Management

References & Advisories

Related Vulnerabilities