Buffer Overflow Vulnerability in FreeIPMI Affecting Multiple Hardware Vendors

CVE-2026-33554

What is CVE-2026-33554?

FreeIPMI, a tool utilized for managing hardware through the Intelligent Platform Management Interface (IPMI), is susceptible to significant buffer overflow vulnerabilities in its ipmi-oem command. This flaw affects response handling for specific OEM commands issued to supported hardware, including Dell, Supermicro, and Wistron servers. Three commands have been identified as vulnerable: retrieving the last POST code from Dell servers, obtaining extra firmware information from Supermicro servers, and reading proprietary strings from Wistron servers. A successful exploitation may allow attackers to manipulate system responses, potentially leading to unauthorized access or further attacks on the associated infrastructure.

References