Lucene search
HistoryAug 13, 2024 - 12:15 p.m.
CVE-2024-35124
openbmc
default password
session management
administrative access
ibm x-force id
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.5%
A vulnerability in the combination of the OpenBMC’s FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.
Affected configurations
Node
ibmopenbmcRangefw1020.00–fw1020.60
ORibmopenbmcRangefw1030.00–fw1030.50
ORibmopenbmcRangefw1050.00–fw1050.10
Related
cvelist
cvelist
CVE-2024-35124 IBM OpenBMC authentication bypass
2024-08-13 11:14:40
vulnrichment
vulnrichment
CVE-2024-35124 IBM OpenBMC authentication bypass
2024-08-13 11:14:40
ibm
ibm
cve
cve
CVE-2024-35124
2024-08-13 12:15:06
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.5%
Related for NVD:CVE-2024-35124