Fujitsu iRMC S6 WebUI Redfish Access Vulnerability Due to Username Length
Vulnerability
A vulnerability exists in Fujitsu iRMC S6 on M5 versions prior to 1.37S, where the system improperly manages Redfish and WebUI access based on the length of the username. Specifically, usernames that are exactly 16 characters long can lead to incorrect handling of access permissions.
Impact
This vulnerability could allow for unauthorized access or manipulation of Redfish/WebUI functionalities, potentially leading to broader system misconfigurations or security issues.
Added: Nov 12, 2025, 6:22 PM
Updated: Nov 12, 2025, 6:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
5.2remediation
0.0relevance
1.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.