WHATPORT(5988) whatport.net WHATPORT(5988)
5988

WBEM CIM-XML over HTTP

A CIM object manager's cleartext port — hardware and system management over CIM-XML.

TCP IANA registry

Description

IANA registers 5988 as wbem-http, the default port for CIM Operations over HTTP (DMTF DSP0200), where XML-encoded CIM method calls are POSTed to a CIM object manager. Real listeners are SFCB, OpenPegasus, and the CIM providers embedded in server hardware and hypervisors — this is how vendor tools read fan speeds, PSU state, and RAID health. On SUSE's SFCB the HTTP port is disabled by default (enableHttp is false) and documented as a debugging aid only, which tells you how the maintainers view it.

Exposed to the internet?

Do not expose

CIM-XML over plain HTTP authenticates with HTTP Basic, so credentials for a hardware management interface cross the wire in cleartext. Use 5989 instead, and keep both on a management network.

Check it yourself

$ curl -si -m 5 http://TARGET:5988/cimom | head -1

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.