CVE-2004-2600
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards...
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
Exploit likelihood
What each source reports
NVD Score used
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
- Record
CVE-2004-2600- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
- Record
CVE-2004-2600- Updated
- 2026-11-02
EUVDEUVD-2004-2591 No score
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
- Record
EUVD-2004-2591- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-prw6-j486-h64g No score
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards...
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
- Record
GHSA-prw6-j486-h64g- Updated
- 2026-11-02
Affected products
- hp carrier grade server cc2300
- hp carrier grade server cc3300
- hp carrier grade server cc3310
- intel carrier grade server tigpr2u
- intel carrier grade server tsrlt2
- intel carrier grade server tsrmt2
- intel cli auto-configuration utility
- intel client system setup utility
- intel entry server board se7210tp1-e
- intel entry server platform sr1325tp1-e
- intel server board scb2
- intel server board sds2
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2600 is a medium vulnerability (CVSS 5.0) in Hp Carrier Grade Server Cc2300, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. No source names a fixed version.