CVE-2019-4169: IBM Open Power

Critical severity, CVSS 9.1. EPSS: 1.7% chance of exploitation in the next 30 days.

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.

Affected products

• IBM Open Power: version op910 only; version op920 only

Published 2019-08-26. Last modified 2026-06-17.