CVE-2021-39296
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
Affected Platforms (CPE)
📦
Openbmc Project
返回 CVE 瀏覽器
相關漏洞威脅
CVE-2019-41699.1
IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password ...
CVE-2020-141568.8
user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file p...
CVE-2021-477018.8
OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploitin...
CVE-2021-389607.5
IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047.