CVE-2025-20097

Summary

CVE-2025-20097 is a vulnerability affecting OpenBMC Firmware used in Intel Server M50FCP Family and Intel Server D50DNP Family before version R01.02.0002. The issue arises from an uncaught exception in OpenBMC, which could potentially enable a denial of service for authenticated users through network access. This vulnerability may allow attackers to cause the system to crash or become unresponsive, leading to service disruption. To mitigate this risk, it is recommended that users upgrade to the latest version of OpenBMC Firmware.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.