OpenBMC
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-35729 | before version 0.72 | Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enab | HIGH 7.5 | 0.7 % | ||
| CVE-2022-29494 | before versions egs-0.91-179 and bhs-04-45 | Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and bhs-04-45 may allow an authent | MEDIUM 6.5 | 0.6 % |