CVE-2026-33554
Deferred Deferred - Pending Action
Buffer Overflow in FreeIPMI ipmi-oem Commands Enables Exploitation

Publication date: 2026-03-24

Last updated on: 2026-06-03

Assigner: MITRE

Description
ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-24
Last Modified
2026-06-03
Generated
2026-06-16
AI Q&A
2026-03-24
EPSS Evaluated
2026-06-14
NVD
CVE-2026-33554
EUVD
EUVD-2026-14899
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
freeipmi freeipmi to 1.16.17 (exc)
gnu freeipmi to 1.16.17 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the ipmi-oem client command of FreeIPMI versions before 1.16.17. It involves exploitable buffer overflows in response messages for three specific subcommands related to hardware vendor-specific IPMI OEM commands. These subcommands are used to retrieve information from servers made by Dell, Supermicro, and Wistron. The buffer overflow occurs when the response messages from these commands are processed, potentially allowing an attacker to exploit the overflow.

Impact Analysis

The buffer overflow vulnerability in ipmi-oem could allow an attacker to execute arbitrary code or cause a denial of service on affected systems by sending crafted response messages. Since ipmi-oem is used for system management tasks such as sensor reading and remote power control, exploitation could lead to unauthorized control or disruption of server management functions.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-33554. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart