CVE-2019-4169

Critical

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was…

ibm·CWE-1188·Published 2019-08-26

CVSS

9.1

EPSS

0.02

KEV

Exploits

cve.orgen

197 chars

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.

NVDen

197 chars

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.

IBM Open Power versiones de Firmware OP910 y OP920, podrían permitir el acceso a BMC por medio de IPMI usando la contraseña OpenBMC predeterminada incluso después de que la contraseña de BMC fue cambiada alejada de la contraseña predeterminada. ID de IBM X-Force: 158702.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.4	10.0	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N
3.0	Primary	cve.org	8.1	—	—	CVSS:3.0/S:U/UI:N/C:H/AV:A/I:H/AC:L/A:N/PR:N/E:U/RL:O/RC:C
3.0	Primary	cve.org	8.1	—	—	CVSS:3.0/S:U/UI:N/C:H/AV:A/I:H/AC:L/A:N/PR:N/E:U/RL:O/RC:C
3.0	Secondary	NVD	8.1	2.8	5.2	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
3.1	Primary	NVD	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N