VULNERABILITY INTELLIGENCE

CVE-2024-35124

CVSS score7.5 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.

Weakness classification

  • psirt@us.ibm.com: CWE-288
  • nvd@nist.gov: CWE-306

Primary references