CVE-2026-33554

FAUCET Score

CVE-2026-33554 describes exploitable buffer overflows in the ipmi-oem component of FreeIPMI versions prior to 1.16.17, specifically affecting subcommands used for Dell, Supermicro, and Wistron hardware. Rated 7.5 High, this vulnerability allows unauthenticated, remote attackers to cause a high availability impact due to its network attack vector and low complexity. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community attention is minimal, and it is not listed in the CISA Known Exploited Vulnerabilities catalog.

Impacted Technologies

Vendor	Product	Version(s)	CPE
FreeIPMI	FreeIPMI	>= 0.7.12, < 1.6.17CNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.40%

Probability of exploitation in next 30 days

EPSS Percentile

32.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0040 is in the 12th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

microsoftpatch availablevia msrc

Product: 21158-17084Fixed in: 1.6.17-1

microsoftpatch availablevia msrc

Product: azl3 freeipmi 1.6.11-1 on Azure Linux 3.0Fixed in: 1.6.17-1

Vendor Advisories (1)

microsoft2026-Mar/CVE-2026-33554Important

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic

Mar 10, 2026

References

openwall.com / lists/oss-security/2026/06/03/1

ftp.gnu.org / gnu/freeipmi

savannah.gnu.org / bugs