IPMI vulnerabilities

1 known vulnerability in IPMI from Intel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  iDRAC8: Insufficient Entropy

  CVE-2024-3411Apr 30, 2024Dell

  Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets