CVE-2019-4169

8.1HIGH

Key Information:

Vendor
IBM
Status
P9 Openpower
P9 Openpower
Vendor
CVE Published:
26 August 2019

Summary

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.

Affected Version(s)

P9 OpenPower OP910

P9 OpenPOWER OP920

References

http://www.ibm.com/support/docview.wss?uid=ibm10881209
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/158702
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.