TI-2024-27723 CVE-2024-41660
slpd-lite unauthenticated memory corruption
Priority MEDIUM 50
slpd-lite is a unicast SLP UDP server.
OpenBMC
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
OpenBMC records in CISA KEVNo OpenBMC vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2026-13506 CVE-2026-16140 · GHSA-m238-h73w-r4f2
OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1
Priority MEDIUM 40
OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while still maintaining the original integrity…
TI-2026-13507 CVE-2026-16141 · GHSA-28w7-pg33-g2hj
OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value
Priority LOW 38
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defa…