Description
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | OPENBMC | FW1060.00 – ≤ FW1060.80 | — |
References
- https://www.ibm.com/support/pages/node/7283590 vendor-advisory patch