VDB

GCVE-110-CERTCC-2014-712660

GCVE-110-CERTCC-2014-712660
Advisory PublishedCVSS 10.0/10
Vulnetix · Advisory published July 10, 2014
Raritan PX power distribution software version 01.05.08 and previous running on a model DPXR20A-16 device allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
Download JSON Open in Console

Risk Scores

CVSS 2.0
10.0/10
Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score9remediation_levelTFreport_confidenceCenvironmental_score6.9723987552target_distributionMenvironmental_vectorCDP:LM/TD:M/CR:H/IR:H/AR:H

Aliases

CVE-2014-2955

Transitive aliases

GHSA-7x69-82vj-v63vGSD-2014-2955

References

Raritian PX power distribution software is vulnerable to the cipher zero attack.
url
Raritian PX power distribution software is vulnerable to the cipher zero attack.
url
Raritian PX power distribution software is vulnerable to the cipher zero attack.
url
Raritian PX power distribution software is vulnerable to the cipher zero attack.
advisory

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›