Lucene search

GoogleOSV:CVE-2021-39296

HistorySep 09, 2021 - 6:15 p.m.

CVE-2021-39296

2021-09-0918:15:09

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.5%

JSON

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

CPENameOperatorVersion
openbmceq0.3
openbmceq0.4
openbmceq1.99.1
openbmceq1.99.9
openbmceq2.6.0-rc1
openbmceq2.7.0-de
openbmceq0.5
openbmceq0.6
openbmceq2.2
openbmceq2.3

Name	Operator	Version
openbmc	eq	0.3
openbmc	eq	0.4
openbmc	eq	1.99.1
openbmc	eq	1.99.9
openbmc	eq	2.6.0-rc1
openbmc	eq	2.7.0-de
openbmc	eq	0.5
openbmc	eq	0.6
openbmc	eq	2.2
openbmc	eq	2.3

Rows per page:

1-10 of 311

References

github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q

github.com/openbmc/openbmc

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html