What’s Vulnerable › Vulnerabilities

CVE-2004-2600

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-12-31 · updated 2026-06-16

Description

The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.

Affected products

• HP Carrier Grade Server Cc2300: a6898a, a6899a
• HP Carrier Grade Server Cc3300: a6900a, a6901a
• HP Carrier Grade Server Cc3310: a9862a, a9863a
• Intel Carrier Grade Server Tigpr2U: all versions
• Intel Carrier Grade Server Tsrlt2: all versions
• Intel Carrier Grade Server Tsrmt2: all versions
• Intel Cli Auto-Configuration Utility: all versions
• Intel Client System Setup Utility: all versions
• Intel Entry Server Board Se7210Tp1-E: all versions
• Intel Entry Server Platform Sr1325Tp1-E: all versions
• Intel Server Board Scb2: all versions
• Intel Server Board Sds2: all versions
• Intel Server Board Se7500Wv2: all versions
• Intel Server Board Se7501Hg2: all versions
• Intel Server Board Shg2: all versions
• Intel Server Configuration Wizard: all versions
• Intel Server Control: all versions
• Intel Server Platform Spsh4: all versions
• Intel Server Platform Sr870Bh2: all versions
• Intel Server Platform Sr870Bn4: all versions
• Intel Server Platform Srsh4: all versions
• Intel System Setup Utility: all versions

References

• http://secunia.com/advisories/11315
• http://support.intel.com/support/motherboards/server/sb/CS-010422.htm
• http://www.osvdb.org/4978
• http://www.securityfocus.com/bid/10068
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15775
• http://secunia.com/advisories/11315
• http://support.intel.com/support/motherboards/server/sb/CS-010422.htm
• http://www.osvdb.org/4978
• http://www.securityfocus.com/bid/10068
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15775

Get alerted when CVE-2004-2600 or the next vulnerability affects your stack