Intel Xeon Baseboard Management Component (BMC) Privilege Escalation (INTEL-SA-00026)

The version of the Intel BIOS on the remote device indicates that the Baseboard Management Component BMC firmware it is running is affected by an unspecified privilege escalation vulnerability. A knowledgeable remote malicious attacker could leverage this issue to deny service to legitimate users...

PT-2013-1619

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the Baseboard Management Controller BMC in Cisco Unified Computing System UCS, which fails to properly handle SSH escape sequences. This allows...

CVE-2012-4078: Improper Authentication

The Baseboard Management Controller BMC in Cisco Unified Computing System UCS does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656...

Stack overflow

Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface IPMI implementation on Supermicro H8DC, H8DG, H8SCM-F, H8SGL-F, H8SM, X7SP, X8DT, X8SI, X9DAX-, X9DB, X9DR, X9QR, X9SBAA-F, X9SC, X9SPU-F, and X9SR devices allow remote attackers to execute...

Low: Red Hat Security Advisory: OpenIPMI security, bug fix, and enhancement update

Updated OpenIPMI packages that fix one security issue, multiple bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which give...

Low Entropy RSA Issue in Intel EPSD Baseboard Management Controller (BMC) Firmware

Summary: There is a potential security vulnerability related to the improper generation of RSA encryption keys in EPSD Baseboard Management Controller BMC firmware. Intel is releasing updated versions of the BMC firmware to mitigate the potential vulnerability. Description: There is a potential...

Cisco ACS 1121 Default Credentials

Cisco ACS 1121 hardware appliance uses OEM IBM xSeries server platform which includes a Baseboard Management Controller. The controller acquires a DHCP address on ethernet port and has default credentials enabled "USERID" and "PASSW0RD". BCM is accessible using the IPMI protocol via free tool suc...

Intel®Xeon® 5500, 5600 Series Baseboard Management Component (BMC) Firmware Privilege Escalation

Summary: Intel is releasing a firmware update to mitigate a privilege escalation issue with Intel®Xeon® 5500, 5600 Series Baseboard Management Component BMC Firmware. Description: Under certain circumstances a privilege escalation issue is present in the Baseboard Management Component BMC firmwar...

IBM Baseboard Management Controller Default Credentials

Binary data ibmbmcdefaultlogin.nbin...

Intel Enterprise Southbridge 2 Baseboard Management Controller unauthorized access

It's possible to connect to server mothreboard control module and execute IPMI command without authentication...

CVE-2007-0661: Undefined Security Weakness

Intel Enterprise Southbridge 2 Baseboard Management Controller BMC, Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management...