Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
metal3-io records in CISA KEVNo metal3-io vulnerabilities are listed in CISA KEV.
Priority MEDIUM 62
The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2025-03-17 · Partial fix · 0.8.1, 0.9.1 CWE-200
Priority LOW 23
The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00574 · Published 2024-09-03 · Fixed in 0.8.0, 0.6.2 +1 CWE-200
Priority LOW 21
Ironic-image is an OpenStack Ironic deployment packaged and configured by Metal3.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2024-04-17 · Partial fix · 24.1.1 CWE-288
