Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via administrator privileges. The Baseboard Management Controller (BMC) program of INSPUR server is weak in checking the firmware and lacks the signature verification mechanism, the attacker who obtains the administrator's rights can control the BMC by inserting malicious code into the firmware program and bypassing the current verification mechanism to upgrade the BMC.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Inspur NF5266M5 数据伪造问题漏洞
Vulnerability Description
Inspur NF5266M5是中国浪潮（Inspur）个人开发者的一款企业级服务器。 Inspur NF5266M5 3.21.2版本及之前版本和 其他服务 M5 devices 存在安全漏洞，该漏洞允许通过管理员权限远程执行代码。基板管理控制器(BMC)计划浪潮集团服务器检查固件和薄弱缺乏签名验证机制,攻击者可利用该漏洞获得管理员的权利可以通过将恶意代码插入到控制BMC固件程序和升级BMC绕过当前的验证机制。
CVSS Information
N/A
Vulnerability Type
N/A