CVE-2019-11175

Intel® Baseboard Management Controller (BMC) firmware exhibits insufficient input validation for CVE-2019-11175, potentially enabling a denial of service via network access for unauthenticated users. The issue is documented across multiple sources, including Intel’s advisory (CVE-2019-11175 among...

CVE-2019-11174

CVE-2019-11174 relates to Intel® Baseboard Management Controller (BMC) firmware and is caused by insufficient access control, potentially allowing an unauthenticated user to disclose information over the network. Connected sources consistently describe this BMC vulnerability and the implied risk ...

CVE-2019-11174

Insufficient access control in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2019-11173

Insufficient session validation in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local access...

CVE-2019-11173

Intel® Baseboard Management Controller (BMC) firmware contains CVE-2019-11173: Insufficient session validation may allow an unauthenticated local attacker to disclose information and/or cause a denial of service. Affected is the Intel BMC firmware itself (various Intel server/compute modules and ...

CVE-2019-11172

Out of bound read in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2019-11172

The CVE-2019-11172 entry describes an Out of bound read in Intel® Baseboard Management Controller (BMC) firmware that could allow an unauthenticated user to disclose information over the network. Intel’s advisory (Intel-SA-00313) links this and related CVEs to multiple BMC firmware vulnerabilitie...

CVE-2019-11171

CVE-2019-11171 is a heap corruption vulnerability in Intel BMC firmware that can allow an unauthenticated attacker to cause information disclosure, escalate privileges, or trigger denial of service over the network. The issue is part of a broader family of BMC flaws (including CVE-2019-11168, -11...

CVE-2019-11171

Heap corruption in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access...

CVE-2019-11170

Intel® Baseboard Management Controller (BMC) firmware contains CVE-2019-11170, an authentication bypass that could let an unauthenticated user gain information disclosure, escalate privileges, or cause denial of service via local access. The advisory also covers related CVEs and recommends updati...

CVE-2019-11170

Authentication bypass in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access...

CVE-2019-11168

Insufficient session validation in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access...

CVE-2019-11168

CVE-2019-11168 is an issue in Intel’s Baseboard Management Controller (BMC) firmware characterized by insufficient session validation, potentially allowing an unauthenticated attacker to cause information disclosure and/or denial of service over a network. The Red Hat and Intel advisories corrobo...

CVE-2019-16650

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the...

CVE-2019-6159

A stored cross-site scripting XSS vulnerability exists in various firmware versions of the legacy IBM System x IMM IMM v1 embedded Baseboard Management Controller BMC. This vulnerability could allow an unauthenticated user to cause JavaScript code to be stored in the IMM log which may then be...

CVE-2019-5497

NetApp AFF A700s Baseboard Management Controller BMC firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution...

NetApp AFF A700s Baseboard Management Controller Trust Management Issues Vulnerability

The NetApp AFF A700s Baseboard Management Controller BMC is a baseboard management controller for the AFF A700s Compact AFF Storage Controllers from NetApp, USA. A trust management issue vulnerability exists in the NetApp AFF A700s BMC with firmware version 1.22 and later. The vulnerability stems...

BSA-2019-785

Security Advisory ID : BSA-2019-785 Component : BMC/IPMI Revision : 1.0: Initial The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address...

CVE-2018-9086

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from privilege management errors, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is caused by privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...