IBM OpenBMC Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM OpenBMC versions FW1110.00 through FW1110.11. This vulnerability allows unauthenticated network users to disrupt the BMC's HTTPS service, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition on the BMC's HTTPS interface, allowing unauthenticated network users to disrupt service.

Remediation

Users should upgrade to version FW1110.20(1110_130) or newer. This version is available through IBM Fix Central. For Power 11 systems, specific model details can be found in the IBM Security Bulletin.