VendorsOpenbmc-projectopenbmcany version
Vulnerabilities

Openbmc-project OpenBMC any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2020-14156
user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.
Published 2020-06-15 · Modified
8.8EPSS 0.018
CVE-2022-2809
Unauthenticated out of bounds heap write in bmcweb
Published 2022-10-27 · Modified
8.2EPSS 0.006
CVE-2022-3409
Unauthenticated out of bounds stack write in bmcweb
Published 2022-10-27 · Modified
8.2EPSS 0.006
CVE-2022-35729
Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.
Published 2023-02-16 · Modified
7.5EPSS 0.007