VendorsOpenbmc-projectopenbmcall versions
Vulnerabilities

Openbmc-project OpenBMC

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2021-39296
In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
Published 2021-09-09 · Modified
10.0EPSS 0.030
CVE-2020-14156
user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.
Published 2020-06-15 · Modified
8.8EPSS 0.018
CVE-2022-2809
Unauthenticated out of bounds heap write in bmcweb
Published 2022-10-27 · Modified
8.2EPSS 0.006
CVE-2022-3409
Unauthenticated out of bounds stack write in bmcweb
Published 2022-10-27 · Modified
8.2EPSS 0.006
CVE-2021-39295
In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.
Published 2023-04-15 · Modified
7.5EPSS 0.013
CVE-2022-35729
Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.
Published 2023-02-16 · Modified
7.5EPSS 0.007