CVE-2020-11486

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be automatically processed within the product's environment, which may lead to remote code execution...

CVE-2020-11485

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery CSRF vulnerability in the AMI BMC firmware in which the web application does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the...

CVE-2020-8340

CVE-2020-8340 is an XSS vulnerability in legacy IBM/Lenovo System x IMM2 (BMC web interface) prior to firmware 5.60. Exploitation requires convincing the user to visit a crafted URL while the user is authenticated; the injected JavaScript executes in the user’s browser, not on IMM2. Documented im...

CVE-2020-8340: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 Integrated Management Module 2, prior to version 5.60, embedded Baseboard Management Controller BMC web interface during an internal security review. This vulnerability could allow JavaScript code t...

PT-2020-20107

Name of the Vulnerable Software and Affected Versions IBM and Lenovo System x IMM2 versions prior to 5.60 Description A cross-site scripting XSS issue was found in the legacy IBM and Lenovo System x IMM2 embedded Baseboard Management Controller BMC web interface. This could allow JavaScript code ...

kernel: Denial Of Service in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c

A memory leak problem was found in ipmibmcregister in drivers/char/ipmi/ipmimsghandler.c in Intelligent Platform Management Interface IPMI which is used for incoming and outgoing message routing purpose. This flaw may allow an attacker with minimal privilege to cause a denial of service by...

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

Intel is warning of a rare critical-severity vulnerability affecting several of its motherboards, server systems and compute modules. The flaw could allow an unauthenticated, remote attacker to achieve escalated privileges. The recently patched flaw CVE-2020-8708 ranks 9.6 out of 10 on the CVSS...

CVE-2020-11951

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account...

HPE Superdome Flex Server Input Validation Error Vulnerability

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise HPE. A security vulnerability exists in the RMC component in versions prior to HPE Superdome Flex Server 3.25.46 2020-5-12. An attacker could exploit the vulnerability to elevate privileges...

The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC) Supervisor, as well as in tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, allows attackers to compromise the integrity of protected information.

The vulnerability in the Web interface for managing the Cisco Integrated Management Controller IMC Supervisor, as well as the tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, is related to privilege...

HPESBHF04004 rev.1 - HPE Superdome Flex Server Remote Management Controller (RMC), Local Elevation of Privilege

Potential Security Impact: Local: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server Prior to 3.25.46 12 May 2020 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7137 |...

NetApp Service Processor and NetApp Baseboard Management Controller Denial of Service Vulnerabilities

NetApp Service Processor and NetApp Baseboard Management Controller are both products of NetApp, Inc.NetApp Service Processor is a remote management device. The product provides node remote management capabilities, including console redirection, logging, and power control.NetApp Baseboard...

CVE-2019-5500

CVE-2019-5500 concerns NetApp’s Service Processor (SV) and Baseboard Management Controller (BMC) firmware. Connected documents confirm a remote, unauthenticated attacker can cause a Denial of Service (DoS) on affected devices. The impact is described as DoS, with CVSS metrics indicating a Network...

PT-2020-11142

Name of the Vulnerable Software and Affected Versions NetApp Service Processor and Baseboard Management Controller firmware affected versions not specified Description The issue allows a remote unauthenticated attacker to cause a Denial of Service DoS. Recommendations At the moment, there is no...

CVE-2019-5500: Undefined Security Weakness

Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Denial of Service DoS...

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Access Control Error Vulnerability

Cisco Integrated Management Controller IMC Supervisor is a set of rack-mounted server centralized management system. Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS. Cisco UCS Director Express for Big Data is a unified infrastructure management...

CVE-2020-3329

A vulnerability in role-based access control of Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only authenticated, remote attacker to disable user accounts on an affected system. The vulnerability is due to...

Design/Logic Flaw

A vulnerability in role-based access control of Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only authenticated, remote attacker to disable user accounts on an affected system. The vulnerability is due to...

PT-2020-17245

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Supervisor versions affected versions not specified Cisco UCS Director versions affected versions not specified Cisco UCS Director Express for Big Data versions affected versions not specified...

CVE-2020-3329: Improper Access Control

A vulnerability in role-based access control of Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only authenticated, remote attacker to disable user accounts on an affected system. The vulnerability is due to...