A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to p...
Vendor
tyan vulnerabilities
1 published CVE affecting tyan, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- s5552_bmc 1
- s5552s5552gm2nr firmware 1
- s5552s5552gm4nr firmware 1
- s5552s5552wgm4nr firmware 1
- s5552s5552wgm4nr-ex firmware 1
Latest tyan CVEs
Newest publication first
-
MediumCVSS 4.2 EPSS 0.24%
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.