CVE-2024-35124

IBM OpenBMC authentication bypass

State: Published
Severity: 7.5 High
Published: Aug 13, 2024
Updated: Aug 13, 2024
Reserved: May 9, 2024

Description

A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	ibm

Weaknesses

CWE-288

Affected Products

Product	Versions
OpenBMCIBM	FW1050.00 through FW1050.10Affected FW1030.00 through FW1030.50Affected FW1020.00 through FW1020.60Affected

References

https://www.ibm.com/support/pages/node/7163195vendor-advisory
https://https//exchange.xforce.ibmcloud.com/vulnerabilities/290674vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.