CVE-2019-6260: Critical severity aspeedtech ast2400 vulnerability
The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow arbitrary read and write access to the BMC's physical address space from the host (or from the network in unusual cases where the BMC console uart is attached to a serial concentrator). This CVE applies to the specific cases of iLPC2AHB bridge Pt I, iLPC2AHB bridge Pt II, PCIe VGA P2A bridge, DMA from/to arbitrary BMC memory via X-DMA, UART-based SoC Debug interface, LPC2AHB bridge, PCIe BMC P2A bridge, and Watchdog setup.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6260?
CVE-2019-6260 is classified as a critical vulnerability due to its potential for arbitrary read and write access.
How do I fix CVE-2019-6260?
To fix CVE-2019-6260, apply the latest firmware updates provided by AspeedTech for the AST2400 and AST2500 BMC hardware.
What systems are affected by CVE-2019-6260?
CVE-2019-6260 affects the ASPEED AST2400 and AST2500 Baseband Management Controllers and their firmware.
What are the potential impacts of exploiting CVE-2019-6260?
Exploiting CVE-2019-6260 can lead to unauthorized access and control over the BMC, compromising system security.
Is CVE-2019-6260 being actively exploited in the wild?
As of the latest information, there have been indications of active exploits leveraging CVE-2019-6260.