CVE-2021-29740

CWE-134 — Uncontrolled Format String3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 77.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Spectrum Scale
Timeline
PublishedJun 1
Latest updateMay 24

Description

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the entire system with root access. IBM X-Force ID: 201474.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDibm/spectrum_scale5.0.0.0 — 5.0.5.7+1
▶CVEListV5ibm/spectrum_scale4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-xrq4-cxfp-74j4: IBM Spectrum Scale 5↗2022-05-24
▶
CVEList
CVE-2021-29740: IBM Spectrum Scale 5↗2021-06-01
▶
CVE-2021-29740 (HIGH CVSS 7.8) | IBM Spectrum Scale 5.0.0 through 5. | cvebase.io