Vendors / OpenBMC Project Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 5
Exploited now OpenBMC Project records in CISA KEV No OpenBMC Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01282 · Published 2023-04-15 · No fix listed CWE-400
Priority MEDIUM 48
In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.03035 · Published 2021-09-09 · No fix listed CWE-287
Priority MEDIUM 43
A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00771 · Published 2022-10-27 · No fix listed CWE-121
Priority MEDIUM 43
A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00771 · Published 2022-10-27 · No fix listed CWE-122
Priority MEDIUM 42
user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01809 · Published 2020-06-15 · No fix listed CWE-276
Priority MEDIUM 40
Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00694 · Published 2023-02-16 · No fix listed CWE-125
Open these records in search → All records by CVSS severity
1 5 0 0 0
THREATIST.IORead the docs