Lucene search

K
cvelistIbmCVELIST:CVE-2021-29695
HistoryMay 25, 2021 - 4:00 p.m.

CVE-2021-29695

2021-05-2516:00:17
ibm
www.cve.org
4
ibm
host firmware
vulnerability
remote
directory traversal
file deletion

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

47.6%

IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558.

CNA Affected

[
  {
    "product": "8335-GTB",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "OP820"
      }
    ]
  },
  {
    "product": "8335-GTA",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "OP820"
      }
    ]
  },
  {
    "product": "8335-GCA",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "OP820"
      }
    ]
  }
]

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

47.6%

Related for CVELIST:CVE-2021-29695