CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

Authentication flaw

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

CVE-2023-31189

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

CVE-2023-31189

CVE-2023-31189 refers to improper authentication in Intel OpenBMC firmware for some Intel Server Product OpenBMC prior to version egs-1.09, enabling an authenticated local user to escalate privileges. The issue is rooted in authentication weaknesses within the OpenBMC firmware and is limited to l...

CVE-2023-31189

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

CVE-2023-32280

CVE-2023-32280 affects Intel Server OpenBMC firmware prior to egs-1.05. Root cause: insufficiently protected credentials, enabling an unauthenticated user to disclose information over the network. Impact per sources: information disclosure with network access; CVSS v3.1 base score 5.3 (AV:N/AC:L/...

Intel Server Product OpenBMC Security Vulnerability

Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in the Intel Server Product OpenBMC firmware egs-1.09 version, which stemmed from improper authentication in the affected product. It...

PT-2024-1781 · Intel · Openbmc

Name of the Vulnerable Software and Affected Versions: Intel Server Product OpenBMC versions prior to egs-1.09 Description: The issue is related to improper authentication in the OpenBMC firmware, which may allow an authenticated user to escalate their privileges via local access. This is due to...

Intel Server Product OpenBMC Security Vulnerability

Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in Intel Server Product OpenBMC egs-1.05, which stemmed from insufficient credential protection in the affected product. The...

Intel® Server OpenBMC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® OpenBMC firmware may allow escalation of privilege and information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32280 Description: Insufficiently...

PT-2024-14779

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory overwrite when capturing 1600x900, which could cause the system to crash when system memory usage is tight. The size of the macro block captured is 8x8,...

Design/Logic Flaw

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

CVE-2021-39295 affects OpenBMC 2.9. An attacker can craft IPMI messages over the netipmid (IPMI lan+) interface to cause a denial of service on the BMC. Connected sources confirm this is a netipmid-triggered DoS issue; no public exploit details are provided in the documents. Intel/INTEL-SA-00737 ...

PT-2023-12349 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC version 2.9 Description: The issue allows an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface by sending crafted IPMI messages. Recommendations: For OpenBMC version 2.9, consider restricting access...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...