The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 67.8%.
Microsoft
Authentication Bypass
Fujitsu M10 Firmware
Intelligent Platform Management Interface
NVD
Exploit-DB
CVSS 3.0
7.5
EPSS
67.8%
Threat
5.0
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Denial Of Service
Linux
Null Pointer Dereference
Linux Kernel
Ubuntu Linux
NVD
CVSS 2.0
7.8
EPSS
1.1%