Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Username Enumeration
Vulnerability Description
Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过差异性导致的信息暴露
Vulnerability Title
Lanner IAC-AST2500A 安全漏洞
Vulnerability Description
Lanner IAC-AST2500A是中国立端（Lanner）公司的一个模块和加速卡。适合 Lanner 网络设备，以支持基于 IPMI 标准的系统运行状况远程管理和监控。 Lanner IAC-AST2500A standard firmware 1.00.0版本存在安全漏洞，该漏洞源于其登录过程中可观察到的差异允许攻击者猜测在BMC中注册的合法用户名。
CVSS Information
N/A
Vulnerability Type
N/A