Description
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SMCI | MBD-X12SPI | 1.07.20 | — |