Session Hijacking Vulnerability in IPMI Implementations by Intel

CVE-2024-3411

Summary

This vulnerability arises from inadequate randomness in IPMI authenticated sessions, which can lead to session hijacking. Attackers can exploit predictable IPMI Session IDs or weak random number generation from the BMC (Baseboard Management Controller). By spoofing IPMI packets, they can potentially bypass security controls and manipulate the BMC device, posing significant risks to system integrity. Organizations should prioritize addressing this flaw to safeguard their infrastructure.

References