Skip to content
OpenAdvisories
High · 7.5 CVE-2024-35124 EUVD-2024-35201GHSA-28c6-pjxj-5qxg

IBM OpenBMC authentication bypass

Published Aug 13, 2024 · Updated Aug 13, 2024 · Assigned by ibm

Description

A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.

Affected products

VendorProductAffectedFixed
IBM OpenBMC FW1050.00 – ≤ FW1050.10, FW1030.00 – ≤ FW1030.50, FW1020.00 – ≤ FW1020.60 —

References