CVE-2021-39296

Katalog CVE

CVSS 10.0 · Critical EPSS 3,0%

Kerentanan Improper Authentication pada openbmc-project openbmc. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

Rincian

Terbit di NVD

9 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

3,0% peluang dieksploitasi; lebih tinggi dari 87,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q exploit · advisory pihak ketiga
• https://github.com/openbmc/openbmc advisory pihak ketiga
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html