237 matches found
Security Bulletin: This Power System update is being released to address CVE 2020-10735
Summary BMC firmware version OP910 uses Python to help serve HTTPS requests but Python is not used to process the request body, so this access vector is not vulnerable the Python long integer vulnerability. A BMC administrator who uses Python from the BMC's command line is subject to this...
The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2023-31189
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-31189
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-32280
Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...
CVE-2023-32280
Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...
Authentication flaw
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-31189
CVE-2023-31189 refers to improper authentication in Intel OpenBMC firmware for some Intel Server Product OpenBMC prior to version egs-1.09, enabling an authenticated local user to escalate privileges. The issue is rooted in authentication weaknesses within the OpenBMC firmware and is limited to l...
CVE-2023-31189
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-31189
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-32280
Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...
CVE-2023-32280
CVE-2023-32280 affects Intel Server OpenBMC firmware prior to egs-1.05. Root cause: insufficiently protected credentials, enabling an unauthenticated user to disclose information over the network. Impact per sources: information disclosure with network access; CVSS v3.1 base score 5.3 (AV:N/AC:L/...
CVE-2023-32280
Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...
PT-2024-1781 · Intel · Openbmc
Name of the Vulnerable Software and Affected Versions: Intel Server Product OpenBMC versions prior to egs-1.09 Description: The issue is related to improper authentication in the OpenBMC firmware, which may allow an authenticated user to escalate their privileges via local access. This is due to...
Intel Server Product OpenBMC Security Vulnerability
Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in the Intel Server Product OpenBMC firmware egs-1.09 version, which stemmed from improper authentication in the affected product. It...
Intel Server Product OpenBMC Security Vulnerability
Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in Intel Server Product OpenBMC egs-1.05, which stemmed from insufficient credential protection in the affected product. The...
Intel® Server OpenBMC Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® OpenBMC firmware may allow escalation of privilege and information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32280 Description: Insufficiently...
PT-2024-14779
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory overwrite when capturing 1600x900, which could cause the system to crash when system memory usage is tight. The size of the macro block captured is 8x8,...