CVE:CVE-2019-6260
CNNVD:CNNVD-201901-788
ASPEED Technology ASPEED ast2400和ast2500都是中国台湾ASPEED Technology公司的一款基带管理控制器。
ASPEED ast2400和ast2500 BMC硬件和固件中对高级高性能总线桥接的实现安全漏洞。攻击者可利用该漏洞对BMC的物理地址空间执行任意的读写操作。
solution:Upgrade aspeedtech ast2400_firmware to a higher version than *; Upgrade aspeedtech ast2500_firmware to a higher version than *; Upgrade netapp fas/aff_baseboard_management_controller to a higher version than *