CVE-2023-40289

CVE-2023-40289 This is an exploit for CVE-2023-40289, a command injection vulnerability in several Baseband Management Controllers BMC by with firmware by ATEN. Examples of affected devices include Aspeed's AST2300 or AST2500, which can be found on Supermicro's X10 and X11 series server systems,...

Exploit for Improper Privilege Management in Supermicro X11Ssm-F_Firmware

CVE-2023-40289 ============== This is an exploit for CVE-2023-...

CVE-2019-6260: Undefined Security Weakness

The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address space from the host or from the network in unusual cases where the BMC console uar...

PT-2019-1339

Name of the Vulnerable Software and Affected Versions OpenBMC versions affected versions not specified ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware Description The issue is related to access control errors in the OpenBMC software, which can be exploited by a...