TROYANOSYVIRUS
← Retour aux CVEs

CVE-2021-39296

CRITICAL
10.0

Description

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

Details CVE

Score CVSS v3.110.0
SeveriteCRITICAL
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie9/9/2021
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0

Produits affectes

openbmc-project:openbmc

Faiblesses (CWE)

CWE-287

References

https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q(cve@mitre.org)
https://github.com/openbmc/openbmc(cve@mitre.org)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html(cve@mitre.org)
https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/openbmc/openbmc(af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.