VULNERABILITY INTELLIGENCE

CVE-2007-2387

CVSS score10 HIGH
EPSS probability2.95%
CISA KEVNot currently listed
Published2007-06-04
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.

Primary references