A vulnerability has been reported in Broadcom Integrated NIC Management Firmware for HP PCs, which can be exploited by malicious people to compromise a vulnerable system
You need to log in to the Secunia Community to view the full description of this advisory
If you are not a member of the Secunia community, you can sign up here for free.
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this
information to firstname.lastname@example.org
Subject: HP Broadcom Integrated NIC Management Firmware Vulnerability
Date Updated: 2010-03-25 - "...Vendor Statement
Affected devices are only vulnerable when Secure ASF (RMCP/RSP) manageability is enabled on the platform , which may not be the typical default system configuration.
Affected devices and the latest vulnerable management firmware version are:
BCM5751, BCM5752, BCM5753, BCM5754, BCM5755, BCM5756, BCM5764, BCM5787: v8.04, BCM57760: v8.07, BCM5761: v126.96.36.199
Updated versions of management firmware for all affected devices is now available to PC OEMs as part of the Broadcom NetXtreme 14.0 software release.
Available work-arounds include: disabling the management firmware and/or Secure ASF (RSP) support and blocking UDP port 664 traffic from unauthorized sources in enterprise firewalls.
Vendor Information: The vendor has not provided us with any further information regarding this vulnerability..."
-- This machine has no brain.
Use your own.
Was this reply relevant?
You must be logged in to post a comment.
Secunia Customer Login
Not a customer already?
Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance.