CVE-2024-35124: IBM OpenBMC authentication bypass
First published: Tue Aug 06 2024(Updated: )
A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM OPENBMC | <=FW1050.00 - FW1050.10 | |
| IBM OPENBMC | <=FW1030.00 - FW1030.50 | |
| IBM OPENBMC | <=FW1020.00 - FW1020.60 | |
| IBM OPENBMC | >=fw1020.00<=fw1020.60 | |
| IBM OPENBMC | >=fw1030.00<=fw1030.50 | |
| IBM OPENBMC | >=fw1050.00<=fw1050.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/weakness
- agent/title
- agent/type
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/references
- agent/description
- agent/first-publish-date
- agent/author
- agent/severity
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- vendor/ibm
- canonical/ibm openbmc
- version/ibm openbmc/fw1050.00 - fw1050.10
- version/ibm openbmc/fw1030.00 - fw1030.50
- version/ibm openbmc/fw1020.00 - fw1020.60
- version/ibm openbmc/fw1020.00
- version/ibm openbmc/fw1020.60
- version/ibm openbmc/fw1030.00
- version/ibm openbmc/fw1030.50
- version/ibm openbmc/fw1050.00
- version/ibm openbmc/fw1050.10