VULNERABILITY INTELLIGENCE

CVE-2019-4169

CVSS score9.1 CRITICAL
EPSS probability1.71%
CISA KEVNot currently listed
Published2019-08-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.

Weakness classification

  • CWE-1188: Initialization of a Resource with an Insecure Default

Primary references