CVE-2021-20487

🗓️ 26 May 2021 16:20:17Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 30 Views

IBM Power9 SBE CVE-2021-20487 allows code injection

Reporter	Title	Published	Views	Family All 8
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2021-20487	25 May 202106:40	–	ibm
CNNVD	IBM Power9 Self Boot Engine(SBE) 数据伪造问题漏洞	25 May 202100:00	–	cnnvd
CNVD	IBM Power9 Self Boot Engine (SBE) Data Forgery Issue Vulnerability	26 May 202100:00	–	cnvd
Cvelist	CVE-2021-20487	26 May 202116:20	–	cvelist
EUVD	EUVD-2021-7905	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20487	26 May 202117:15	–	nvd
OSV	CVE-2021-20487	26 May 202117:15	–	osv
Prion	Code injection	26 May 202117:15	–	prion

NVD

Vulners

Node

ibm power9_system_firmwareRangefw930.00–fw930.30

ibm power9_system_firmwareRangefw940.00–fw940.20

AND

ibm 9008-22lMatch-

ibm 9009-22aMatch-

ibm 9009-41aMatch-

ibm 9009-42aMatch-

ibm 9040-mr9Match-

ibm 9080-m9sMatch-

ibm 9223-22hMatch-

ibm 9223-42hMatch-

Node

ibm power9_system_firmwareRange<fw950.00

AND

ibm 9009-22gMatch-

ibm 9009-41gMatch-

ibm 9009-42gMatch-

ibm 9223-22sMatch-

ibm 9223-42sMatch-

Node

ibm scale-out_lc_system_firmwareRange<op940.20

AND

ibm 8335-gthMatch-

ibm 8335-gtxMatch-

ibm 9183-22xMatch-

[
  {
    "product": "Power 9 Systems",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "FW930"
      },
      {
        "status": "affected",
        "version": "FW940"
      },
      {
        "status": "affected",
        "version": "FW941"
      },
      {
        "status": "affected",
        "version": "OP940"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6455911
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/197730

21 Nov 2024 05:46Current

8.9High risk

Vulners AI Score8.9

CVSS 26.5

CVSS 3.19.1

CVSS 38

EPSS0.00128

CWE-347