IDRAC6 IPMI 2.0 Cipher Type Zero Authentication Bypass Vulnerability

Question

We have a R610 server with a IDRAC6 Monolithic interface at version 1.95. The below IDRAC6 vulnerability was recently identified. Is anyone aware of any plans to patch the below vulnerability on the IDRAC6 Monolithic? IDRAC6 Home Page: http://en.community.dell.com/techcenter/systems-management/w/wiki/4357.idrac6-home.aspx#exe_summary Vulnerability Name:  IPMI 2.0 Cipher Type Zero Authentication Bypass Vulnerability Vulnerability Description:   The IPMI 2.0 specification supports a cipher with identifier 0. Many vendors have implemented this cipher, which allows for complete bypass of the IPMI authentication process. URL: removed Thank you for reviewing this post. Eric

DELL-Josh Cr · Answer

Please do not post links to exploits. ipmi over lan is disbaled by default so local access would be needed unless this feature was enabled. http://en.community.dell.com/techcenter/systems-management/w/wiki/4929.how-to-check-if-ipmi-cipher-0-is-off.aspx

TheLonelySysAdmin · Answer

Great non response. This is a serious vulnerability and all you said is 'don't talk about it'. No where can I find a fix for this in the 2.x firmware.   What a joke.

Systems Management General

Was this post helpful?