CVE:CVE-2020-26122
CNNVD:CNNVD-202012-427
Inspur NF5266M5是中国浪潮（Inspur）个人开发者的一款企业级服务器。
Inspur NF5266M5 3.21.2版本及之前版本和 其他服务 M5 devices 存在安全漏洞，该漏洞允许通过管理员权限远程执行代码。基板管理控制器(BMC)计划浪潮集团服务器检查固件和薄弱缺乏签名验证机制,攻击者可利用该漏洞获得管理员的权利可以通过将恶意代码插入到控制BMC固件程序和升级BMC绕过当前的验证机制。
solution:Upgrade inspur nf8480m5_firmware to a higher version than 1.19.34,and avoid the version (,1.19.34); Upgrade inspur nf8260m5_firmware to a higher version than 1.19.34,and avoid the version (,1.19.34); Upgrade inspur ns5162m5_firmware to a higher version than 4.5.3,and avoid the version (,4.5.3); Upgrade inspur ns5488m5_firmware to a higher version than 1.19.33,and avoid the version (,1.19.33); Upgrade inspur ns5484m5_firmware to a higher version than 1.19.33,and avoid the version (,1.19.33); Upgrade inspur ns5482m5_firmware to a higher version than 1.19.33,and avoid the version (,1.19.33); Upgrade inspur nf5280m5_firmware to a higher version than 4.26.6,and avoid the version (,4.26.6); Upgrade inspur nf5468m5_firmware to a higher version than 1.18.51,and avoid the version (,1.18.51); Upgrade inspur nf5488m5-d_firmware to a higher version than 1.18.51,and avoid the version (,1.18.51); Upgrade inspur nf5180m5_firmware to a higher version than 4.18.2,and avoid the version (,4.18.2); Upgrade inspur nf5270m5_firmware to a higher version than 4.9.1,and avoid the version (,4.9.1); Upgrade inspur nf5260m5_firmware to a higher version than 3.8.0,and avoid the version (,3.8.0); Upgrade inspur nf5266m5_firmware to a higher version than 3.21.3,and avoid the version (,3.21.3); Upgrade inspur nf5466m5_firmware to a higher version than 4.28.0,and avoid the version (,4.28.0); Upgrade inspur nf5486m5_firmware to a higher version than 3.22.0,and avoid the version (,3.22.0)