CVE-2005-2984

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-09-20 · updated 2026-06-16

Description

Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port.

Affected products

Data Center Resources Avocent: ccm4850_2.1_firmware

References

http://drwetter.org/cs-probs/avocent-sshbug.txt
http://marc.info/?l=bugtraq&m=112680615103315&w=2
http://secunia.com/advisories/16836/
http://www.securityfocus.com/bid/14853
https://exchange.xforce.ibmcloud.com/vulnerabilities/22302
http://drwetter.org/cs-probs/avocent-sshbug.txt
http://marc.info/?l=bugtraq&m=112680615103315&w=2
http://secunia.com/advisories/16836/
http://www.securityfocus.com/bid/14853
https://exchange.xforce.ibmcloud.com/vulnerabilities/22302

Get alerted when CVE-2005-2984 or the next vulnerability affects your stack