CVE-2019-6260

CVE-2019-6260 is a critical vulnerability affecting ASPEED ast2400 and ast2500 Baseband Management Controllers (BMCs) and related firmware, including those used in NetApp products. This flaw allows unauthenticated attackers to achieve arbitrary read and write access to the BMC's physical memory from the host or, in specific configurations, over the network. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and limited community discussion, its high FAUCET Risk Score and media coverage indicate significant potential impact.