CVE-2024-3411

Implementations of IPMI Authenticated sessions in multiple Baseboard Management Controller (BMC) software units are vulnerable to session hijacking due to insufficient entropy. An attacker with network access to the BMC can exploit predictable IPMI Session IDs or weak BMC Random Numbers to replay...