CVE-2007-2387: Apple Xserve Lights-Out Management

High severity, CVSS 10.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.

Affected products

• Apple Xserve Lights-Out Management: version firmware_0 only

Published 2007-06-04. Last modified 2026-06-16.