Critical severity9.1NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-4169

Description

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Open Power2 versions
cpe:2.3:o:ibm:open_power:op910:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:ibm:open_power:op910:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:open_power:op920:*:*:*:*:*:*:*
IBM/Open Power Firmwarellm-fuzzy
IBM/P9 OpenPowerv5
Range: OP910

Patches

Vulnerability mechanics

References

www.ibm.com/support/docview.wssnvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/158702nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000