PT-2019-16946 · Ibm · Ibm Open Power Firmware

CVE-2019-4169 · Publicado 2019-08-26 · Atualizado 2022-12-09

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Open Power Firmware versions OP910 and OP920

Description The issue allows access to the Baseboard Management Controller (BMC) via Intelligent Platform Management Interface (IPMI) using the default OpenBMC password, even after the BMC password has been changed from the default.

Recommendations For IBM Open Power Firmware versions OP910 and OP920, change the default OpenBMC password to a unique and secure password to prevent unauthorized access to the BMC via IPMI.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2019-4169

Produtos afetados

Ibm Open Power Firmware

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/158702 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10881209 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-4169 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4169 · Nota de Segurança