CVE-2021-29847
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD
Description
BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before op825.51 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power Hardware Management Console (7063 Cr1) | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before op825.51 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System Cs822lc (8005 22n) | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before op825.51 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System Cs821lc (8005 12n) | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before op825.51 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S822lc (8001 22c) | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before op825.51 |
| Running on/with | Platform Versions |
|---|---|
Ibm Power System S821lc (8001 12c) | All versions |
References (4)
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.