CVEvulnerability

CVE-2024-21927

5.0 MEDIUM Published 2025-09-23 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-09-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.0 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Weaknesses
CWE-241

Description

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service.

Related

Weakness · CWE (1)

  • CWE-241 Improper Handling of Unexpected Data Type weakness

References