Security Bulletin: This Power System update is being released to address CVE-2019-4169

Summary POWER9: In response to an IPMI implementation error, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2019-4169. Vulnerability Details CVEID: CVE-2019-4169 DESCRIPTION: IBM Open Power Firmware could allow access to BMC v...

CVE-2019-4169

CVE-2019-4169 affects IBM Open Power Firmware OP910 and OP920. The issue allows BMC access via IPMI using the default OpenBMC password even after the BMC password has been changed. IBM’s bulletin confirms affected Power9 OpenPOWER releases OP910 and OP920 and provides remediation: OP910 users sho...