CVE-2024-3411

Implementations of IPMI Authenticated sessions are vulnerable to session hijacking due to insufficient randomness in the session integrity process. An attacker with access to the BMC network can exploit predictable IPMI Session IDs or weak BMC Random Numbers to replay or hijack sessions. This all...