CVE-2026-18450

Summary

The BMC fails to enforce integrity and encryption on IPMI commands, allowing unauthenticated attackers to send forged packets that execute arbitrary commands on an active session.

Exploitability

High exploitability due to lack of authentication or integrity checks; no user interaction or prior access required.

Blast radius

Full compromise of confidentiality, integrity, and availability of the affected system, potentially enabling remote code execution or system takeover.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply firmware patch version 2.590 or later from the vendor, as this is the only version explicitly referenced in the description as fixing the issue.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.