PT-2024-25703 · Ipmi · Ipmi

Published 2024-04-30 · Updated 2024-07-03 · CVE-2024-3411

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IPMI (affected versions not specified)

Description The issue concerns implementations of IPMI Authenticated sessions that do not provide enough randomness, making them susceptible to session hijacking. An attacker can exploit this by using either a predictable IPMI Session ID or a weak BMC Random Number to bypass security controls. This can be achieved by sending spoofed IPMI packets to manage the BMC device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2024-3411

Affected Products

Ipmi

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-3411 · Security Note
• https://kb.cert.org/vuls/id/163057 · Note
• https://dell.com/support/kbdoc/en-US/000226504/dsa-2024-295-security-update-for-dell-idrac8-ipmi-session-vulnerability · Note
• https://twitter.com/oktsec/status/1785467394971840807 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1785400912086770145 · Twitter Post
• https://intel.la/content/dam/www/public/us/en/documents/specification-updates/ipmi-intelligent-platform-mgt-interface-spec-2nd-gen-v2-0-spec-update.pdf · Note
• https://twitter.com/CVEnew/status/1785381721543700717 · Twitter Post