CVE-2007-2387: Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password...

Security readout for executives and security teams

Some Intel-based Apple Xserve servers shipped with Lights-Out Management that allowed remote IPMI access without requiring a password. If that management interface is reachable, an attacker could gain administrative control of the server’s out-of-band management layer. Exposure is mainly legacy environments still running Intel Apple Xserve systems with pre-1.0 Lights-Out Management firmware. Risk depends heavily on whether IPMI or management interfaces are reachable from untrusted networks. Treat reachable legacy Xserve management interfaces as urgent. The business risk is administrative server control through an out-of-band path that normal operating-system controls may not cover. Mitigation focus: Apply Apple Xserve Lights-Out Management Firmware Update 1.0 where applicable.; Restrict IPMI and LOM access to a dedicated management network.; Block management interfaces from internet and user network access..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.