Design/Logic Flaw

Uncaught exception in webserver for the Integrated BMC in some IntelR platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access...

CVE-2022-29493

Uncaught exception in webserver for the Integrated BMC in some IntelR platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access...

CVE-2022-29493

The CVE-2022-29493 issue affects Intel Integrated Baseboard Management Controller (BMC) firmware on some Intel platforms. The vulnerability is an uncaught exception in the webserver that may allow a privileged user to cause a denial of service via network access. Affected OpenBMC components are a...

PT-2023-12971 · Intel · Integrated Bmc

Name of the Vulnerable Software and Affected Versions: Integrated BMC versions prior to 2.86 Integrated BMC versions prior to 2.09 Integrated BMC versions prior to 2.78 Description: The issue is related to an uncaught exception in the webserver for the Integrated BMC in some IntelR platforms, whi...

SUSE CVE-2019-11182

Memory corruption in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access...

AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US

No description provided...

Integrated BMC and OpenBMC Firmware Advisory

Summary: Potential security vulnerabilities in the Integrated Baseboard Management Controller BMC and OpenBMC firmware in some Intel® platforms may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability...

Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software

Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...

Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software

Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...

PT-2023-33449 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: The issue is related to a possible use-after-free UAF condition in the ibmpex register bmc function. This condition may occur when the function fails. The actual impact and attack...

PT-2023-33266 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a possible use-after-free UAF condition in the ibmpex register bmc function. This condition may occur when the function fails. The actual impact and attack...

PT-2023-33387 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: The issue is related to a possible use-after-free UAF condition in the ibmpex register bmc function. This condition may occur when the function fails. The actual impact and attack...

CVE-2022-42290

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42287

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...

CVE-2022-42287

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...

CVE-2022-42289

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42290

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42288

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...

Design/Logic Flaw

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

Design/Logic Flaw

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...