1358 matches found
CVE-2024-25943
iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...
CVE-2024-25943
Dell iDRAC9 is affected by CVE-2024-25943. Affected versions are 14th Generation prior to 7.00.00.172 and 15th/16th Generations prior to 7.10.50.00. The issue is a session hijacking vulnerability in IPMI that could allow a remote attacker to execute arbitrary code in the vulnerable application. R...
CVE-2024-25943: Use of Insufficiently Random Values
iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...
kernel: ipmi_si: fix a memleak in try_smi_init()
A memory leak flaw was found in the Linux kernel's IPMI System Interface driver in the initialization error path. A local user can trigger this issue by loading the ipmisi module when initialization fails after allocating the sism structure but before registering the shutdown handler. This causes...
CVE-2024-3411
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device...
CVE-2024-3411
Implementations of IPMI Authenticated sessions in multiple Baseboard Management Controller (BMC) software units are vulnerable to session hijacking due to insufficient entropy. An attacker with network access to the BMC can exploit predictable IPMI Session IDs or weak BMC Random Numbers to replay...
CVE-2024-3411 Insufficient Randomness When Validating an IPMI Authenticated Session
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device...
CVE-2024-3411 Insufficient Randomness When Validating an IPMI Authenticated Session
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device...
CVE-2024-3411: Insufficient Entropy
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device...
BMC software fails to validate IPMI session.
Overview The Intelligent Platform Management Interface IPMI implementations in multiple manufacturer's Baseboard Management Controller BMC software are vulnerable to IPMI session hijacking. An attacker with access to the BMC network with IPMI enabled can abuse the lack of session integrity to...
CVE-2023-4857
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information...
CVE-2023-4855
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI...
CVE-2023-4857
Summary: A concrete authentication-bypass issue affects Lenovo SMM/SMM2 and Fan Power Controller (FPC) firmware in Lenovo ThinkSystem, ThinkAgile, NeXtScale, and CP-CB-10 platforms. Affected components: System Management Module/SMM2 and Fan Power Controller firmware. Root cause (as described): La...
CVE-2023-4857
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information...
CVE-2023-4855
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI...
CVE-2023-4855
CVE-2023-4855 affects Lenovo SMM/SMM2 and FPC. The Red Hat/NVD/NVD feeds describe a command injection vulnerability where an authenticated user with elevated privileges can execute unauthorized commands via IPMI. The CVSS 3.1 vector indicates Network attack vector, low attack complexity, required...
CVE-2023-4855
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI...
CVE-2023-4857: Missing Authentication for Critical Function
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information...
CVE-2023-4855: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI...
