Security Bulletin: Mitigations are being announced to address CVE-2020-4839 and CVE-2021-29695

Summary IBM products 8335-GCA, 8335-GTA, and 8335-GTB have identified security vulnerabilities. Vulnerability Details CVEID:CVE-2020-4839 DESCRIPTION: IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged...

CVE-2021-29695

CVE-2021-29695 concerns IBM Host firmware for LC-class Systems (e.g., OP820 on 8335-GCA/GTA/GTB). The vulnerability allows a remote attacker to traverse directories and delete arbitrary files by sending a specially crafted URL request. Metrics show mixed scores across CVSS versions (NVD 3.1: 6.5 ...