← Back

CVE-2019-4169

nvd nist
Published: Aug 26, 2019Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.

Affected (2)

Products: Ibm: Open Power
Ibm
1 product
Open Power
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Open Power
Version op910
Running on/withPlatform Versions
Ibm
Power System 8335 Gth
All versions
Ibm
Power System 8335 Gtx
All versions
Configuration B
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Open Power
Version op920
Running on/withPlatform Versions
Ibm
Power System 8335 Gtc
All versions
Ibm
Power System 8335 Gtg
All versions
Ibm
Power System 8335 Gtw
All versions

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (4)

Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory

Timeline

No history available yet.