Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xserve_lights-out_management | Apple | firmware_0 (including) | firmware_0 (including) |