CVE-2021-39296
published 2021-09-09CVE-2021-39296: In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
PriorityP263critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
EPSS
2.91%
85.3th percentile
In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openbmc-project | openbmc | — | — |
CVSS provenance
nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48qhttps://github.com/openbmc/openbmchttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.htmlhttps://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48qhttps://github.com/openbmc/openbmchttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
2021-09-09
Published