PT-2019-3994

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller BMC affected versions not specified Description The issue is related to insufficient input validation in the Intel Baseboard Management Controller firmware. This can potentially allow a remote attacker to...

PT-2019-4004

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller affected versions not specified Description The issue is related to a buffer overflow in the memory of the Baseboard Management Controller, which can be exploited by a remote attacker to disclose protected...

PT-2019-3993

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller BMC firmware affected versions not specified Description The issue is related to memory corruption in the Intel Baseboard Management Controller firmware, which may allow an unauthenticated user to...

PT-2019-3996

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller affected versions not specified Description The issue is related to insufficient session validation in the Intel Baseboard Management Controller firmware, which may allow an unauthenticated user to...

PT-2019-4276

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller firmware affected versions not specified Description The issue is related to an authentication bypass in the Intel Baseboard Management Controller firmware, which may allow an unauthenticated user to...

CVE-2019-16650

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the...

CVE-2019-6159

A stored cross-site scripting XSS vulnerability exists in various firmware versions of the legacy IBM System x IMM IMM v1 embedded Baseboard Management Controller BMC. This vulnerability could allow an unauthenticated user to cause JavaScript code to be stored in the IMM log which may then be...

CVE-2019-6159: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in various firmware versions of the legacy IBM System x IMM IMM v1 embedded Baseboard Management Controller BMC. This vulnerability could allow an unauthenticated user to cause JavaScript code to be stored in the IMM log which may then be...

CVE-2019-5497

NetApp AFF A700s Baseboard Management Controller BMC firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution...

NetApp AFF A700s Baseboard Management Controller Trust Management Issues Vulnerability

The NetApp AFF A700s Baseboard Management Controller BMC is a baseboard management controller for the AFF A700s Compact AFF Storage Controllers from NetApp, USA. A trust management issue vulnerability exists in the NetApp AFF A700s BMC with firmware version 1.22 and later. The vulnerability stems...

PT-2019-17714

Name of the Vulnerable Software and Affected Versions NetApp AFF A700s Baseboard Management Controller BMC firmware versions 1.22 and higher Description The issue concerns a default account enabled in the firmware that could allow unauthorized arbitrary command execution. Recommendations For NetA...

CVE-2019-5497: Initialization of a Resource with an Insecure Default

NetApp AFF A700s Baseboard Management Controller BMC firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution...

BSA-2019-785

Security Advisory ID : BSA-2019-785 Component : BMC/IPMI Revision : 1.0: Initial The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address...

CVE-2018-9086

In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from privilege management errors, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is caused by privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

CVE-2018-12171

Privilege escalation in Intel Baseboard Management Controller BMC firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network...

CVE-2018-12171

Privilege escalation in Intel Baseboard Management Controller BMC firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network...

CVE-2018-12171: Undefined Security Weakness

Privilege escalation in Intel Baseboard Management Controller BMC firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network...

PT-2018-1598

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller BMC firmware versions prior to 1.43.91f76955 Description The issue is related to privilege escalation in the Intel Baseboard Management Controller BMC firmware, caused by privilege management errors. This...

Intelligent Baseboard Management Controller elevation of privilege vulnerability in multiple Huawei products

Huawei 1288H V5 and others are different models of server equipment from Huawei, China.Intelligent Baseboard Management Controller iBMC is one of the embedded server intelligent management system. A privilege-lifting vulnerability exists in iBMC in several Huawei products. A remote attacker could...