2042 matches found
Design/Logic Flaw
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions...
CVE-2022-43309
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions...
CVE-2022-43309
Affected product: Supermicro X11SSL-CF HW Rev 1.01 with BMC firmware v1.63. Root cause: incorrect PMBus/VRM permissions in the BMC module (PMFault). Impact: could allow a privileged OS attacker to disable the CPU, with no guaranteed recovery. Exploitation: no public exploit details in provided do...
CVE-2023-26550
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
Sql injection
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
BMC Control-M SQL注入漏洞
BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M versions prior to 9.0.20.214, which stems from the presence of a SQL injection vulnerability that can be exploited...
CVE-2023-26550
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
CVE-2023-26550
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
CVE-2023-26550
CVE-2023-26550 affects BMC Control-M prior to 9.0.20.214. The vulnerability is a SQL injection in the memname JSON field that allows an attacker to execute arbitrary SQL commands. The issue is documented with a high severity (CVSS v3.1: 9.8/CRITICAL, network vector, no user interaction, no privil...
K77452266: Intel CPU vulnerability CVE-2018-12171
Security Advisory Description Privilege escalation in Intel Baseboard Management Controller BMC firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network. CVE-2018-12171 Impact There is no impact; F5...
K35236639: Supermicro BMC vulnerability
Security Advisory Description F5 is aware of the reports of vulnerabilities in the baseband management controllers BMCs of Supermicro servers. These vulnerabilities allow attackers to easily connect to a server and virtually mount any USB device to the server, remotely over any network, including...
K16846: IPMI vulnerability CVE-2013-4786
Security Advisory Description The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol RAKP authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC...
Vulnerabilities fixed in Intel BMC and OpenBMC firmware
Intel has fixed vulnerabilities in the BMC and OpenBMC firmware for various processors. A malicious party could exploit them to cause a denial-of-service, or grant themselves elevated privileges, possibly up to administrator level. Intel has released updates to fix the vulnerabilities in BMC and...
CVE-2022-29493
Uncaught exception in webserver for the Integrated BMC in some IntelR platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access...
CVE-2022-29493
Uncaught exception in webserver for the Integrated BMC in some IntelR platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access...
Design/Logic Flaw
Uncaught exception in webserver for the Integrated BMC in some IntelR platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access...
CVE-2022-29493
Uncaught exception in webserver for the Integrated BMC in some IntelR platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access...
CVE-2022-29493
The CVE-2022-29493 issue affects Intel Integrated Baseboard Management Controller (BMC) firmware on some Intel platforms. The vulnerability is an uncaught exception in the webserver that may allow a privileged user to cause a denial of service via network access. Affected OpenBMC components are a...
PT-2023-12971 · Intel · Integrated Bmc
Name of the Vulnerable Software and Affected Versions: Integrated BMC versions prior to 2.86 Integrated BMC versions prior to 2.09 Integrated BMC versions prior to 2.78 Description: The issue is related to an uncaught exception in the webserver for the Integrated BMC in some IntelR platforms, whi...
