EUVD-2021-25656

Malware in sbrugna...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

PT-2023-12349 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC version 2.9 Description: The issue allows an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface by sending crafted IPMI messages. Recommendations: For OpenBMC version 2.9, consider restricting access...

The vulnerability of the netipmid (IPMI LAN+) interface in the embedded operating system OpenBMC, related to errors during authentication procedures, allows a intruder to bypass the authentication process and gain full control over the system.

The vulnerability of the netipmid IPMI LAN+ interface in the embedded operating system OpenBMC is related to errors during the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain full control over the system...