Database/Firmware, BMC & network fabric
Opengear console server: Authentication bypass in the console server allowing remote attackers to modify settings
CVE-2011-3997Firmware, BMC & network fabriccurated
Impact
Authentication bypass in the console server allowing remote attackers to modify settings and reach every attached device's serial console — switches, BMCs, storage controllers
Who can reach it
Network / OOB LAN, unauthenticated
What to do
Console-server firmware upgrade; older units are EOL and the practical fix is replacing the appliance, which means a scheduled loss of out-of-band access to the rack
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.