Approved changes feed: RSS · Atom

cpe:2.3:o:ibm:openbmc:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductOpenbmc (22e92651-325a-5712-b659-687ee7fec196)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35124 vulnerable 2026-06-08 06:37:35.251129 IBM OpenBMC authentication bypass
HIGH (7.5)
A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.
Published: 2024-08-13T11:14:40.227Z
Updated: 2024-08-13T13:07:10.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31916 vulnerable 2026-06-08 06:35:32.402049 IBM OpenBMC information disclosure
HIGH (7.5)
IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.
Published: 2024-06-27T17:45:31.618Z
Updated: 2024-08-02T01:59:50.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.